CVE-2022-0144

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2022-0144
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-0144.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2022-0144
Aliases
Downstream
Published
2022-01-11T06:45:10Z
Modified
2026-08-12T03:51:17.868944917Z
Severity
  • 7.1 (High) CVSS_V3 - CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H CVSS Calculator
Summary
Improper Privilege Management in shelljs/shelljs
Details

shelljs is vulnerable to Improper Privilege Management

Database specific 
{
    "cwe_ids": [
        "CWE-269"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/0xxx/CVE-2022-0144.json",
    "cna_assigner": "@huntrdev"
}
References

Affected packages

Git / github.com/shelljs/shelljs

Affected ranges

Type
GIT
Repo
https://github.com/shelljs/shelljs
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
70668a4555c7d49c4f67d53ea063b899be4d6d40
Fixed
d919d22dd6de385edaa9d90313075a77f74b338c
Database specific
Show details 
{
    "cpe": "cpe:2.3:a:shelljs_project:shelljs:*:*:*:*:*:node.js:*:*",
    "extracted_events": [
        {
            "introduced": "0"
        },
        {
            "fixed": "0.8.5"
        }
    ],
    "source": [
        "CPE_RANGE",
        "REFERENCES"
    ]
}

Affected versions

v0.*
v0.0.2
v0.0.2pre1
v0.0.3
v0.0.4
v0.0.5
v0.0.5pre1
v0.0.5pre2
v0.0.5pre3
v0.0.5pre4
v0.0.6
v0.0.6pre1
v0.0.6pre2
v0.0.7
v0.0.8
v0.0.9
v0.1.0
v0.1.1
v0.1.2
v0.1.3
v0.2.2
v0.2.3
v0.2.4
v0.2.5
v0.2.6
v0.3.0
v0.5.0
v0.5.1
v0.5.2
v0.5.3
v0.6.0
v0.7.0
v0.7.1
v0.7.2
v0.7.3
v0.7.4
v0.7.5
v0.7.6
v0.7.7
v0.7.8
v0.8.0
v0.8.1
v0.8.2
v0.8.3
v0.8.4

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-0144.json"