Critical severity9.8NVD Advisory· Published Dec 16, 2020· Updated Jun 17, 2026

CVE-2020-7781

Description

This affects the package connection-tester before 0.2.1. The injection point is located in line 15 in index.js. The following PoC demonstrates the vulnerability:

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
connection-testernpm	< 0.2.1	0.2.1

Affected products

Connection Tester Project/Connection Tester
cpe:2.3:a:connection-tester_project:connection-tester:*:*:*:*:*:node.js:*:*
Range: <0.2.1
connection-tester/connection-testerdescription
ghsa-coords
pkg:npm/connection-tester
Range: < 0.2.1

Patches

Vulnerability mechanics

References

github.com/skoranga/node-connection-tester/pull/10nvdPatchThird Party AdvisoryWEB
snyk.io/vuln/SNYK-JS-CONNECTIONTESTER-1048337nvdExploitThird Party AdvisoryWEB
github.com/advisories/GHSA-w5mp-8p8w-mhh8ghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2020-7781ghsaADVISORY

News mentions

No linked articles in our index yet.

cvss	0.637
epss	0.002
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000