← All advisories

High severity7.4NVD Advisory· Published Dec 21, 2022· Updated Jun 17, 2026

CVE-2022-24431

CVE-2022-24431

Description

All versions of package abacus-ext-cmdline are vulnerable to Command Injection via the execute function due to improper user-input sanitization.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
abacus-ext-cmdlinenpm	<= 0.0.6-dev.9	—

Affected products

3

ghsa-coords
pkg:npm/abacus-ext-cmdline
Range: <= 0.0.6-dev.9
abacus-ext-cmdline/abacus-ext-cmdlinedescription
Abacus Ext Cmdline Project/Abacus Ext Cmdline
cpe:2.3:a:abacus-ext-cmdline_project:abacus-ext-cmdline:*:*:*:*:*:node.js:*:*

Patches

Vulnerability mechanics

References

3

security.snyk.io/vuln/SNYK-JS-ABACUSEXTCMDLINE-3157950nvdExploitThird Party AdvisoryWEB
github.com/advisories/GHSA-m5v8-wpw4-rj3xghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2022-24431ghsaADVISORY

News mentions

0

No linked articles in our index yet.