CVE-2020-7613
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2020-7613
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
clamscan through 1.2.0 is vulnerable to Command Injection. It is possible to inject arbitrary commands as part of the `_is_clamav_binary` function located within `Index.js`. It should be noted that this vulnerability requires a pre-requisite that a folder should be created with the same command that will be chained to execute. This lowers the risk of this issue.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
clamscan 注入漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
clamscan是一款命令行工具，它主要用于扫描文件或目录中是否包含病毒。 clamscan 1.2.0及之前版本中的Index.js文件的‘_is_clamav_binary()’函数存在注入漏洞。攻击者可通过发送特制请求利用该漏洞执行任意命令。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | clamscan | All versions including 1.2.0 | - |
II. Public POCs for CVE-2020-7613
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2020-7613
请登录查看更多情报信息。
- https://github.com/kylefarris/clamscan/blob/master/index.js#L34x_refsource_MISC
- https://snyk.io/vuln/SNYK-JS-CLAMSCAN-564113x_refsource_MISC
- https://nvd.nist.gov/vuln/detail/CVE-2020-7613
Same Patch Batch · n/a · 2020-04-07 · 119 CVEs total
| CVE-2017-18660 | Samsung移动设备缓冲区错误漏洞 | |
| CVE-2020-11609 | Linux kernel 代码问题漏洞 | |
| CVE-2017-18647 | Samsung移动设备竞争条件问题漏洞 | |
| CVE-2017-18648 | Samsung移动设备输入验证错误漏洞 | |
| CVE-2017-18649 | Samsung移动设备安全漏洞 | |
| CVE-2017-18650 | Samsung移动设备代码问题漏洞 | |
| CVE-2017-18651 | Samsung移动设备输入验证错误漏洞 | |
| CVE-2017-18652 | Samsung移动设备注入漏洞 | |
| CVE-2017-18653 | Samsung移动设备安全漏洞 | |
| CVE-2017-18654 | Samsung移动设备授权问题漏洞 | |
| CVE-2017-18655 | Samsung移动设备缓冲区错误漏洞 | |
| CVE-2017-18656 | Samsung移动设备缓冲区错误漏洞 | |
| CVE-2017-18657 | Samsung移动设备代码问题漏洞 | |
| CVE-2017-18658 | Samsung移动设备代码问题漏洞 | |
| CVE-2017-18659 | Samsung移动设备安全漏洞 | |
| CVE-2017-18669 | Samsung移动设备安全漏洞 | |
| CVE-2017-18666 | Samsung移动设备安全漏洞 | |
| CVE-2017-18667 | Samsung移动设备输入验证错误漏洞 | |
| CVE-2017-18668 | Samsung移动设备安全漏洞 | |
| CVE-2017-18671 | Samsung移动设备安全漏洞 |
Showing top 20 of 119 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
V. Comments for CVE-2020-7613
No comments yet