Read the docs

Mversion Project

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

Mversion Project records in CISA KEV

No Mversion Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Mversion 2 records LOW

Records

2 records in Mversion · all components

TI-2020-06208 CVE-2020-7688 · GHSA-6m8p-4fxj-pgc2

Command injection in mversion

Priority LOW 37

The issue occurs because tagName user input is formatted inside the exec function is executed without any checks.

CVSS 3.1HIGH 8.4 Local No auth No interaction EPSS 0.0055 Published 2020-07-01 Fixed in 2.0.1 CWE-78
TI-2020-03544 CVE-2020-4059 · GHSA-qjg4-w4c6-f6c6

Command Injection in mversion

Priority LOW 37

In mversion before 2.0.0, there is a command injection vulnerability.

CVSS 3.1HIGH 7.3 Network No auth No interaction EPSS 0.02596 Published 2020-06-18 Fixed in 2.0.0 CWE-77
Open these records in search →