CVE-2020-36650mediumCWE-77

CVE-2020-36650: fallo de gravedad media en IonicaBizau node-gry

IonicaBizau node-gry command injection

Publicada el 11 ene 2023 · Actualizada el 04 ago 2024

Seguir esta CVE + Monitorear node-gry + Monitorear gry

Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.

13Vexday Risk Score

Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.

ssvc Trackcvss 5.5epss 2.0%

A vulnerability, which was classified as critical, was found in IonicaBizau node-gry up to 5.x. This affects an unknown part. The manipulation leads to command injection. Upgrading to version 6.0.0 is able to address this issue. The patch is named 5108446c1e23960d65e8b973f1d9486f9f9dbd6c. It is recommended to upgrade the affected component. The associated identifier of this vulnerability is VDB-218019.

CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

Productos afectados

IonicaBizau · node-gry

Referencias

https://github.com/IonicaBizau/node-gry/commit/5108446c1e23960d65e8b973f1d9486f9f9dbd6c https://github.com/IonicaBizau/node-gry/pull/22 https://github.com/IonicaBizau/node-gry/releases/tag/6.0.0 https://vuldb.com/?ctiid.218019 https://vuldb.com/?id.218019