high8.4
CVE-2020-7688
The issue occurs because tagName user input is formatted inside the exec function is executed without any checks.
Impact
The issue occurs because tagName user input is formatted inside the exec function is executed without any checks.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Mversion Project | Mversion | before 2.0.1 |
Weakness classification
References
- NVD record
- CVE.org record
- https://github.com/418sec/huntr/pull/102
- https://github.com/mikaelbr/mversion/commit/b7a8b32600e60759a7ad3921ec4a2750bf173482
- https://snyk.io/vuln/SNYK-JS-MVERSION-573174
- https://github.com/418sec/huntr/pull/102
- https://github.com/mikaelbr/mversion/commit/b7a8b32600e60759a7ad3921ec4a2750bf173482
- https://snyk.io/vuln/SNYK-JS-MVERSION-573174