Closed debricked[bot] closed 1 year ago
Vulnerable dependency: shelljs (npm) 0.8.4
:pushpin: Remember! Check the changes to ensure they don't introduce any breaking changes. :books: Read more about the CVE
Duplicate of https://github.com/OS2iot/OS2IoT-backend/pull/187
CVE–2022–0144![shield](https://debricked.com/media/images/default_images/markdown/pull_request/high3-2-01.svg)
Vulnerable dependency: shelljs (npm)
0.8.4
Vulnerability details
Description
### Improper Privilege Management > The software does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor. ### NVD > shelljs is vulnerable to Improper Privilege Management ### GitHub > Improper Privilege Management in shelljs > > shelljs is vulnerable to Improper Privilege ManagementCVSS details -
7.1
|CVSS3 metrics|| |:-|:-| |Attack Vector|**Local**| |Attack Complexity|**Low**| |Privileges Required|**Low**| |User interaction|**None**| |Scope|**Unchanged**| |Confidentiality|**High**| |Integrity|**None**| |Availability|**High**|References
[NVD - CVE-2022-0144](https://nvd.nist.gov/vuln/detail/CVE-2022-0144)[Related information
:pushpin: Remember! Check the changes to ensure they don't introduce any breaking changes.
:books: Read more about the CVE