CVE-2022-25962

HIGH CVSS: 7.4 Published: 2023-01-26 Modified: 2026-06-17

Description

All versions of the package vagrant.js are vulnerable to Command Injection via the boxAdd function due to improper input sanitization.

Affected Platforms

Vagrant.Js Project Vagrant.Js

Weakness Type

CWE-78, NVD-CWE-Other, CWE-77

References