CVE-2022-25962

Description (CNA)

All versions of the package vagrant.js are vulnerable to Command Injection via the boxAdd function due to improper input sanitization.

Affected (CNA)

CWE

CWE-78

References

• https://security.snyk.io/vuln/SNYK-JS-VAGRANTJS-3175614

ADP enrichment