CVE-2019-10807

CRITICAL

blamer < 1.0.1 - OS Command Injection via Argument Injection

Title source: llm
STIX 2.1

Description

Blamer versions prior to 1.0.1 allows execution of arbitrary commands. It is possible to inject arbitrary commands as part of the arguments provided to blamer.

References (2)

Core 2
Core References
Exploit, Patch, Third Party Advisory x_refsource_misc
https://snyk.io/vuln/SNYK-JS-BLAMER-559541

Scores

CVSS v3 9.8
EPSS 0.0242
EPSS Percentile 82.1%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Details

CWE
CWE-78
Status published
Products (2)
blamer_project/blamer < 1.0.1
npm/blamer 0 - 1.0.1npm
Published Mar 11, 2020
Tracked Since Feb 18, 2026