Description

This affects all versions of package freediskspace. The vulnerability arises out of improper neutralization of arguments in line 71 of freediskspace.js.

Remediation

References

https://snyk.io/vuln/SNYK-JS-FREEDISKSPACE-1040716

Related Vulnerabilities

CVE-2020-14446 Vulnerability in maven package org.wso2.carbon.identity.framework:org.wso2.carbon.identity.entitlement.ui

CVE-2020-1748 Vulnerability in maven package org.wildfly.security:wildfly-elytron

CVE-2020-17479 Vulnerability in npm package jpv

CVE-2017-0783 Vulnerability in maven package org.apache.openmeetings:openmeetings-web

CVE-2018-8010 Vulnerability in maven package org.apache.solr:solr-core

Severity

Critical

Classification

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Tags

Third Party Advisory CWE-78