NetSight
critical9.8

CVE-2020-28438

deferred-exec Command Injection vulnerability

Impact

A command injection vulnerability affects all versions of package deferred-exec. The injection point is located in line 42 in lib/deferred-exec.js

Affected packages

EcosystemPackageAffectedFixed in
npmdeferred-exec<= 0.3.1none recorded

Affected products

VendorProductAffected versions
Deferred-Exec ProjectDeferred-Exec
All versions

Weakness classification

References