CVE-2020-7752

HighCVSS 8.8/10Last modified Jun 17, 2026

Description

This affects the package systeminformation before 4.27.11. This package is vulnerable to Command Injection. The attacker can concatenate curl's parameters to overwrite Javascript files and then execute any OS commands.

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-78

Affected software

No affected versions have been published.

Timeline

Published
Oct 26, 2020
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2020

CVE-2020-77537.5All versions of package trim are vulnerable to Regular Expression Denial of Service (ReDoS) via trim().CVE-2020-77547.5This affects the package npm-user-validate before 1.0.1. The regex that validates user emails took exponentially longer to process long inpuCVE-2020-77557.5All versions of package dat.gui are vulnerable to Regular Expression Denial of Service (ReDoS) via specifically crafted rgb and rgba values.CVE-2020-77576.5This affects all versions of package droppy. It is possible to traverse directories to fetch configuration files from a droopy server.CVE-2020-77587.5This affects versions of package browserless-chrome before 1.40.2-chrome-stable. User input flowing from the workspace endpoint gets used toCVE-2020-77597.2The package pimcore/pimcore from 6.7.2 and before 6.8.3 are vulnerable to SQL Injection in data classification functionality in ClassificatiCVE-2020-77607.5This affects the package codemirror before 5.58.2; the package org.apache.marmotta.webjars:codemirror before 5.58.2. The vulnerable regular CVE-2020-77615.3This affects the package @absolunet/kafe before 3.2.10. It allows cause a denial of service when validating crafted invalid emails.CVE-2020-77626.5This affects the package jsreport-chrome-pdf before 1.10.0.CVE-2020-77637.5This affects the package phantom-html-to-pdf before 0.6.1.CVE-2020-77647.5This affects the package find-my-way before 2.2.5, from 3.0.0 and before 3.0.5. It accepts the Accept-Version' header by default, and if verCVE-2020-77655.3This affects the package @firebase/util before 0.3.4. This vulnerability relates to the deepExtend function within the DeepCopy.ts file. Dep