← CVE Intelligence

CVE-2022-25908

n/a / create-choo-electron PUBLISHED

Description (CNA)

All versions of the package create-choo-electron are vulnerable to Command Injection via the devInstall function due to improper user-input sanitization.

Affected (CNA)

Vendor / productVersions
n/a / create-choo-electronaffected 0 before *

CWE

CWE-78

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.