DEBIAN-CVE-2020-7752

See a problem?
Please try reporting it to the source first.

Source

https://security-tracker.debian.org/tracker/CVE-2020-7752

Import Source

https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2020-7752.json

JSON Data

https://api.osv.dev/v1/vulns/DEBIAN-CVE-2020-7752

Upstream

CVE-2020-7752

Withdrawn

2026-06-01T20:00:39.608119056Z

Published

2020-10-26T17:15:12.987Z

Modified

2026-06-01T20:00:39.608119187Z

Severity

8.8 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVSS Calculator

Summary

[none]

Details

This affects the package systeminformation before 4.27.11. This package is vulnerable to Command Injection. The attacker can concatenate curl's parameters to overwrite Javascript files and then execute any OS commands.

References

https://security-tracker.debian.org/tracker/CVE-2020-7752

Affected packages

Debian:14 / node-systeminformation

Package

Name: node-systeminformation
Purl: pkg:deb/debian/node-systeminformation?arch=source&distro=forky

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

5.*

5.31.6-1

5.31.6-2

5.31.6-3

5.31.6-4

5.31.7-1

Ecosystem specific

{
    "urgency": "not yet assigned"
}

Database specific

source

"https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2020-7752.json"