CVE-2022-25962
All versions of the package vagrant.js are vulnerable to Command Injection via the boxAdd function due to improper input sanitization.
CVSS 3.1 · 7.4 High
EPSS 1.0%
KEV · Not listed
Vendors
Products