← Database

CVE-2022-25923

HIGH CVSS: 7.4 Published: 2023-01-06 Modified: 2026-06-17

Description

Versions of the package exec-local-bin before 1.2.0 are vulnerable to Command Injection via the theProcess() functionality due to improper user-input sanitization.

Affected Platforms

Exec-Local-Bin Project Exec-Local-Bin

Weakness Type

CWE-78, NVD-CWE-Other, CWE-77

References