CVE-2022-25350

Published January 26th, 2023

View on NVD ↗

CVSS v3

7.4

HIGH

CVSS v2

N/A

Affected

1

PROJECT

Description

All versions of the package puppet-facter are vulnerable to Command Injection via the getFact function due to improper input sanitization.

olindata/node-puppet-facter

Node.JS module for Facter

GitHub