Ecosyste.ms: Advisories

Security Advisories: GSA_kwCzR0hTQS14ajl2LTZxMmYtdnFoeM4AAw0A

wifey vulnerable to Command Injection due to improper input sanitization

All versions of the package wifey are vulnerable to Command Injection via the connect() function due to improper input sanitization.

Permalink: https://github.com/advisories/GHSA-xj9v-6q2f-vqhx
JSON: https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS14ajl2LTZxMmYtdnFoeM4AAw0A
Source: GitHub Advisory Database
Origin: Unspecified
Severity: Critical
Classification: General
Published: over 1 year ago
Updated: about 1 year ago

CVSS Score: 9.8
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Identifiers: GHSA-xj9v-6q2f-vqhx, CVE-2022-25890
References:

• https://nvd.nist.gov/vuln/detail/CVE-2022-25890
• https://security.snyk.io/vuln/SNYK-JS-WIFEY-3175615
• https://github.com/advisories/GHSA-xj9v-6q2f-vqhx

Blast Radius: 0.0

Affected Packages