Security Advisory

CVE-2022-25962

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2023-01-25 05:00:04

Last updated 2025-04-01 14:13:35

Assigner snyk

State PUBLISHED

All versions of the package vagrant.js are vulnerable to Command Injection via the boxAdd function due to improper input sanitization.