CVE-2022-24431

All versions of package abacus-ext-cmdline are vulnerable to Command Injection via the execute function due to improper user-input sanitization.

Score

CVSS 3.1 9.8 Critical

Status

Modified - report@snyk.io

Published

2022-12-21

Last modified

2025-04-15

Weaknesses

CWE-78

Affected products

• Abacus-ext-cmdline (Abacus-ext-cmdline Project)

References

• https://security.snyk.io/vuln/SNYK-JS-ABACUSEXTCMDLINE-3157950