← Database

CVE-2022-24377

HIGH CVSS: 7.4 Published: 2022-12-14 Modified: 2026-06-17

Description

The package cycle-import-check before 1.3.2 are vulnerable to Command Injection via the writeFileToTmpDirAndOpenIt function due to improper user-input sanitization.

Affected Platforms

Cycle-Import-Check Project Cycle-Import-Check

Weakness Type

CWE-78, CWE-78

References