CVE-2020-28429

CVE-2020-28429 is a critical command injection vulnerability affecting all versions of the geojson2kml package. An unauthenticated attacker can execute arbitrary commands on the host system by injecting malicious input into the index.js file. This vulnerability carries a CVSS score of 9.8, indicating a severe risk with complete compromise of confidentiality, integrity, and availability. While no active exploitation or Metasploit modules are reported, a Nuclei template exists, and the EPSS score suggests a high likelihood of exploitation, despite minimal community discussion or media coverage.