Description

An unintended require vulnerability in script-manager npm package version 0.8.6 and earlier may allow attackers to execute arbitrary code.

Remediation

References

https://hackerone.com/reports/660563

Related Vulnerabilities

CVE-2020-15123 Vulnerability in npm package codecov

CVE-2022-36010 Vulnerability in npm package react-editable-json-tree

CVE-2022-23059 Vulnerability in maven package com.shopizer:sm-shop-model

CVE-2019-5448 Vulnerability in npm package yarn

CVE-2022-39299 Vulnerability in npm package node-saml

Severity

Critical

Classification

CWE-94 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Tags

Exploit Third Party Advisory