VULNERABILITY INTELLIGENCE

CVE-2020-7626

CVSS score9.8 CRITICAL

EPSS probability4.34%

CISA KEVNot currently listed

Published2020-04-02

Last modified2026-06-17

Description

karma-mojo through 1.0.1 is vulnerable to Command Injection. It allows execution of arbitrary commands via the config argument.