Skip to content
CVE PROGRAM SOURCE RECORD6.4 Medium

CVE-2020-26274

Command Injection Vulnerability in systeminformation

Description

In systeminformation (npm package) before version 4.31.1 there is a command injection vulnerability. The problem was fixed in version 4.31.1 with a shell string sanitation fix.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

sebhildebrandt systeminformation

  • < 4.31.1affected

References