Severity
Medium
Analysis Summary
CVE-2022-29256
Node.js sharp module could allow a local authenticated attacker to execute arbitrary commands on the system, caused by a logic error at ‘npm install’ time. By sending a specially-crafted request, an attacker could exploit this vulnerability to execute arbitrary commands on the system.
Impact
- Command Excecution
Indicators Of Compromise
CVE
- CVE-2022-29256
Affected Vendors
- Node.js
Affected Products
- Node.js sharp module 0.30.4
Remediation
Refer to sharp GIT Repository for patch, upgrade or suggested workaround information.