Description

All versions of the package vagrant.js are vulnerable to Command Injection via the boxAdd function due to improper input sanitization.

Remediation

References

https://security.snyk.io/vuln/SNYK-JS-VAGRANTJS-3175614

Related Vulnerabilities

CVE-2020-7961 Vulnerability in maven package com.liferay.portal:com.liferay.portal.impl

CVE-2021-21252 Vulnerability in maven package org.webjars.bowergithub.jquery-validation:jquery-validation

CVE-2020-11022 Vulnerability in maven package org.webjars.bowergithub.jquery:jquery

CVE-2018-5653 Vulnerability in maven package org.apache.cayenne.modeler:cayenne-modeler

CVE-2018-20094 Vulnerability in maven package com.xuxueli:xxl-conf

Severity

Critical

Classification

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Tags

Third Party Advisory NVD-CWE-Other