A command injection vulnerability in the `devcert` module may lead to remote code execution when users of the module pass untrusted input to the `certificateFor` function.
Metrics
Affected Vendors & Products
References
Link | Providers |
---|---|
https://hackerone.com/reports/863544 |
History
No history.
MITRE
Status: PUBLISHED
Assigner: hackerone
Published: 2020-07-10T15:37:18
Updated: 2024-08-04T09:56:26.952Z
Reserved: 2020-01-28T00:00:00
Link: CVE-2020-8186
Vulnrichment
No data.
NVD
Status : Modified
Published: 2020-07-10T16:15:11.843
Modified: 2024-11-21T05:38:27.743
Link: CVE-2020-8186
Redhat
No data.