Bestzip Project

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Bestzip Project records in CISA KEV

No Bestzip Project vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

1 record in Bestzip · all components

TI-2020-06249 CVE-2020-7730 · GHSA-6xv6-jpvw-cx6q

MEDIUM 48

The package bestzip before 2.1.7 are vulnerable to Command Injection via the options param.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.03145 Published 2020-09-04 Fixed in 2.1.7 CWE-78