What is GHSA-4m6q-rxhm-675w?

GHSA-4m6q-rxhm-675w is a security advisory published by GitHub Security Advisories with Critical severity. OS Command Injection in adb-driver

Which CVE IDs does GHSA-4m6q-rxhm-675w cover?

GHSA-4m6q-rxhm-675w covers the following CVE IDs: CVE-2020-7636. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-4m6q-rxhm-675w?

GHSA-4m6q-rxhm-675w has a CVSS v3 base score of 9.8, published by GitHub Security Advisories.

Which products are affected by GHSA-4m6q-rxhm-675w?

GHSA-4m6q-rxhm-675w affects 1 product, including: npm/adb-driver:\u003c= 0.1.8.

GHSA-4m6q-rxhm-675wCriticalCVSS 9.8

OS Command Injection in adb-driver

Vendor

GitHub Security Advisories

Published

December 9, 2021

Last Modified

February 1, 2023

🔗 CVE IDs covered (1)

CVE-2020-7636 →

📋 Description

adb-driver through 0.1.8 is vulnerable to Command Injection.It allows execution of arbitrary commands via the command function.

🎯 Affected products1

npm/adb-driver:<= 0.1.8

🔗 References (4)

https://nvd.nist.gov/vuln/detail/CVE-2020-7636
https://snyk.io/vuln/SNYK-JS-ADBDRIVER-564430
https://www.npmjs.com/package/adb-driver
https://github.com/advisories/GHSA-4m6q-rxhm-675w