Moole Vulnerability Database

Find real vulnerabilities before they ship

High

CVE-2022-25916

Versions of the package mt7688-wiscan before 0.8.3 are vulnerable to Command Injection due to improper input sanitization in the 'wiscan.scan' function.

VectorLOCAL

PublishedFeb 01, 2023, 05:15

Published Byreport@snyk.io

Base Score

Score7.8

Affected Versions

Package (Ecosystem)IntroducedFixedLimit

mt7688-wiscan(npm)00.8.3N/A

References

https://github.com/simenkid/mt7688-wiscan/blob/master/index.js%23L22
https://github.com/simenkid/mt7688-wiscan/commit/ff6d6567c65b4e972916a8fbc4533212f20a2fa5
https://security.snyk.io/vuln/SNYK-JS-MT7688WISCAN-3177394

Weakness Type

NVD-CWE-Other

CVSS Metrics

Base Score

7.8

Vector String

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Base SeverityHigh

Version

3.1

Attack Vector (AV)

LOCAL