GHSA-4gfq-6m28-m5mg

Source

https://github.com/advisories/GHSA-4gfq-6m28-m5mg

Import Source

https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2021/04/GHSA-4gfq-6m28-m5mg/GHSA-4gfq-6m28-m5mg.json

JSON Data

https://api.osv.dev/v1/vulns/GHSA-4gfq-6m28-m5mg

Aliases

CVE-2020-7775

Published

2021-04-13T15:16:11Z

Modified

2023-11-08T04:04:09Z

Severity

9.8 (Critical) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVSS Calculator

Summary

Improper neutralization of arguments in freediskspace

Details

This affects all versions of package freediskspace. The vulnerability arises out of improper neutralization of arguments in line 71 of freediskspace.js.

Database specific

{
    "cwe_ids":  [
        "CWE-78"
    ],
    "github_reviewed":  true,
    "github_reviewed_at":  "2021-03-19T23:11:49Z",
    "nvd_published_at":  "2021-02-02T19:15:00Z",
    "severity":  "CRITICAL"
}

References

Affected packages

npm / freediskspace

Package

Name: freediskspace; View open source insights on deps.dev
Purl: pkg:npm/freediskspace

Affected ranges

Type: SEMVER
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Last Affected

1.2.0

Database specific

source

"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2021/04/GHSA-4gfq-6m28-m5mg/GHSA-4gfq-6m28-m5mg.json"