Description

shelljs is vulnerable to Improper Privilege Management

Remediation

References

https://github.com/shelljs/shelljs/commit/d919d22dd6de385edaa9d90313075a77f74b338c

https://huntr.dev/bounties/50996581-c08e-4eed-a90e-c0bac082679c

Related Vulnerabilities

CVE-2021-23335 Vulnerability in npm package is-user-valid

CVE-2023-36542 Vulnerability in maven package org.apache.nifi:nifi-record-serialization-services

CVE-2022-23059 Vulnerability in maven package com.shopizer:shopizer

CVE-2022-29648 Vulnerability in maven package com.jflyfox:jflyfox_jfinal

CVE-2022-23302 Vulnerability in maven package log4j:log4j

Severity

High

Classification

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

Tags

Patch Third Party Advisory Exploit NVD-CWE-noinfo