NetSight
critical9.8

CVE-2020-23256

electerm allows unauthorized users to execute arbitrary commands

Impact

An issue was discovered in Electerm 1.3.22, allows attackers to execute arbitrary commands via unverified request to electerms service.

Affected packages

EcosystemPackageAffectedFixed in
npmelecterm<= 1.3.22none recorded

Affected products

VendorProductAffected versions
Electerm ProjectElecterm
Version 1.3.22

Weakness classification

References