CVE-2020-7688

Command Injection

High · published July 1, 2020

CVSS v3.1
8.4
EPSS
1%
Percentile
45.2
In the wild
Unconfirmed
What it is

The issue occurs because tagName user input is formatted inside the exec function is executed without any checks.

The record
Technical detail
CVSS v3.1
8.4 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:R
CVSS v4.0
Not supplied
EPSS
0.00550 · 45.2th percentile
Published
2020-07-01T16:15Z
EPSS history
Timeline
  • 01 JUL 16:15Z
    Command Injection
    cvelistv5