CVE-2022-0144CWE-269privilege-escalation

CVE-2022-0144

High · published January 11, 2022

CVSS v3.1
7.1
EPSS
0%
Percentile
35.9
In the wild
Unconfirmed
What it is

shelljs is vulnerable to Improper Privilege Management

The record
Technical detail
CVSS v3.1
7.1 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00427 · 35.9th percentile
Weakness
CWE-269 · Improper Privilege Management
Published
2022-01-11T12:15Z
Affected products (1)
ProductVersionsFixed in
shelljs_project/shelljs< 0.8.50.8.5
References (4)
https://github.com/shelljs/shelljs/commit/d919d22dd6de385edaa9d90313075a77f74b338c · [email protected]https://huntr.dev/bounties/50996581-c08e-4eed-a90e-c0bac082679c · [email protected]https://github.com/shelljs/shelljs/commit/d919d22dd6de385edaa9d90313075a77f74b338c · af854a3a-2127-422b-91ae-364da2661108https://huntr.dev/bounties/50996581-c08e-4eed-a90e-c0bac082679c · af854a3a-2127-422b-91ae-364da2661108
EPSS history
Timeline
  • 11 JAN 06:45Z
    Improper Privilege Management in shelljs/shelljs
    cvelistv5