Versions of the npm CLI prior to 6.14.6 are vulnerable to an information exposure vulnerability through log files. The CLI supports URLs like "<protocol>://[<user>[:<password>]@]<hostname>[:<port>][:][/]<path>". The password value is not redacted and is printed to stdout and also to any generated log files.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: GitHub_M
Published: 2020-07-07T18:55:12
Updated: 2024-08-04T13:08:21.646Z
Reserved: 2020-06-25T00:00:00
Link: CVE-2020-15095
Vulnrichment
No data.
NVD
Status : Modified
Published: 2020-07-07T19:15:10.833
Modified: 2023-11-07T03:17:24.663
Link: CVE-2020-15095
Redhat