Paper/Archive/CVE-2020-36199

CVE-2020-36199

Kaspersky — TinyCheck before commits 9fd360d and ea53de8 was vulnerable to command injection due to insufficient checks of input parameters in severa…

EPSS 2%CVSS 9.8

critical.is priorityof 100

CVSS 9.8 (NVD)9.8 / 10 × 3029.4 Not in CISA KEV+300.0 EPSS percentile 82.6.826 × 2016.5 No public exploit+100.0 SSVC exploitation: unknown+100.0

Description · from the CVE record

TinyCheck before commits 9fd360d and ea53de8 was vulnerable to command injection due to insufficient checks of input parameters in several places.

Affected

ProductAffectedFixed inSource

Kaspersky TinyCheckwithout commits 9fd360d and ea53de8–CNA

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References

refgithub.com/KasperskyLab/TinyCheck/security/advisories/GHSA-j2vj-mhr6-795m