Read the docs

Cycle-import-check Project

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Cycle-import-check Project records in CISA KEV

No Cycle-import-check Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Cycle-import-check 1 record HIGH

Records

1 record

TI-2022-08254 CVE-2022-24377 · GHSA-995x-33wq-8gc9

Command injection in cycle-import-check

Priority HIGH 76

The package cycle-import-check before 1.3.2 are vulnerable to Command Injection via the writeFileToTmpDirAndOpenIt function due to improper user-input sanitization.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02379 Published 2022-12-15 Fixed in 1.3.2 CWE-78
Open these records in search →