CVE-2020-7672

mosc through 1.0.0 is vulnerable to Arbitrary Code Execution

published June 10, 2020

CVSS
—
EPSS
2%
Percentile
79.9
In the wild
Unconfirmed
What it is

mosc through 1.0.0 is vulnerable to Arbitrary Code Execution. User input provided to `properties` argument is executed by the `eval` function, resulting in code execution.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01938 · 79.9th percentile
Published
2020-06-10T15:36Z
EPSS history
Timeline
  • 10 JUN 15:36Z
    mosc through 1.0.0 is vulnerable to Arbitrary Code Execution
    cvelistv5