Description
An issue was discovered in Electerm 1.3.22, allows attackers to execute arbitrary code via unverified request to electerms service.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| npm | electerm | <= 1.3.22 | — | GHSA-x73w-g8hx-v7rp |
Critical · 9.8
CVE-2020-23256
EUVD-2023-0585GHSA-x73w-g8hx-v7rp
electerm allows unauthorized users to execute arbitrary commands
Published Jan 20, 2023 · Updated Apr 3, 2025 · Assigned by mitre