Security Advisory

CVE-2020-26274

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2020-12-16 19:30:18
Last updated 2024-08-04 15:56:03
Assigner GitHub_M
CVSS score 6.4
State PUBLISHED

Description

In systeminformation (npm package) before version 4.31.1 there is a command injection vulnerability. The problem was fixed in version 4.31.1 with a shell string sanitation fix.