Skip to content
CVE PROGRAM SOURCE RECORD8.8 High

CVE-2020-7752

Command Injection

Description

This affects the package systeminformation before 4.27.11. This package is vulnerable to Command Injection. The attacker can concatenate curl's parameters to overwrite Javascript files and then execute any OS commands.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

n/a systeminformation

  • unspecified to < 4.27.11affected

References