CVE-2020-7645

All versions of chrome-launcher allow execution of arbitrary commands, by controlling the $HOME environment variable in Linux operating systems.

Score

CVSS 3.1 9.8 Critical

Status

Modified - report@snyk.io

Published

2020-05-02

Last modified

2024-08-04

Weaknesses

CWE-78

Affected products

• Chrome-launcher (Google)

References

• http://snyk.io/vuln/SNYK-JS-CHROMELAUNCHER-537575