~ / search / GHSA-x73w-g8hx-v7rp

GHSA-x73w-g8hx-v7rp

electerm allows unauthorized users to execute arbitrary commands

Source: GitHub Advisory Database (reviewed) Critical CVE-2020-23256

Packages

EcosystemPackageAffectedFixed in
npm electerm <= 1.3.22 no fix listed

Details

As written in the advisory (Markdown source, shown as plain text).

An issue was discovered in Electerm 1.3.22, allows attackers to execute arbitrary commands via unverified request to electerms service.

References

External links from the advisory. They lead to third-party sites.