compile-sass prior to 1.0.5 allows execution of arbritary commands
published February 24, 2020
CVSS
—
EPSS
2%
Percentile
82.9
In the wild
Unconfirmed
What it is
compile-sass prior to 1.0.5 allows execution of arbritary commands. The function "setupCleanupOnExit(cssPath)" within "dist/index.js" is executed as part of the "rm" command without any sanitization.
The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02266 · 82.9th percentile
Published
2020-02-24T17:42Z
EPSS history
Timeline
24 FEB 17:42Z
compile-sass prior to 1.0.5 allows execution of arbritary commands