CVE-2020-7623

Published April 2nd, 2020

View on NVD ↗

CVSS v3

9.8

CRITICAL

CVSS v2

7.5

HIGH

Affected

1

PROJECT

Description

jscover through 1.0.0 is vulnerable to Command Injection. It allows execution of arbitrary command via the source argument.

node-modules/jscover

node wrap for JSCover.

GitHub