CVE-2020-7772

HIGH

doc-path < 2.1.2 - Remote Code Execution via Untrusted Input

Title source: llm

This affects the package doc-path before 2.1.2.

Core 3

Core References

Exploit, Third Party Advisory x_refsource_misc

Broken Link x_refsource_misc

Patch, Third Party Advisory x_refsource_misc

CVSS v3 7.5

EPSS 0.0274

EPSS Percentile 84.4%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Status published

Products (2)

doc-path_project/doc-path < 2.1.2

npm/doc-path 0 - 2.1.2npm

Published Nov 15, 2020

Tracked Since Feb 18, 2026