CVE-2019-10800

Command Injection

Medium · published July 13, 2022

CVSS v3.1
6.5
EPSS
1%
Percentile
68.2
In the wild
Unconfirmed
What it is

This affects the package codecov before 2.0.16. The vulnerability occurs due to not sanitizing gcov arguments before being being provided to the popen method.

The record
Technical detail
CVSS v3.1
6.5 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
CVSS v4.0
Not supplied
EPSS
0.01211 · 68.2th percentile
Published
2022-07-13T11:50Z
EPSS history
Timeline
  • 13 JUL 11:50Z
    Command Injection
    cvelistv5