Skip to content
OpenAdvisories

Vendor

ONS Digital

1 known vulnerabilities.

Products

RAS Collection Instrument 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.5
    CVE-2020-36762 Public exploit

    ONS Digital RAS Collection Instrument comment.yml jobs os command injection

    A vulnerability was found in ONS Digital RAS Collection Instrument up to 2.0.27 and classified as critical. Affected by this issue is the function jobs of the file .github/workflows/comment.yml. The manipulation of the argument $COMMENT_BODY leads to os comma…

    ONS Digital RAS Collection Instrument