CVE-2022-25350

HIGH CVSS: 7.4 Published: 2023-01-26 Modified: 2026-06-17

Description

All versions of the package puppet-facter are vulnerable to Command Injection via the getFact function due to improper input sanitization.

Affected Platforms

Helecloud Puppet-Facter

Weakness Type

CWE-78, NVD-CWE-Other, CWE-77

References