CVE-2020-7604

CVE-2020-7604 is a critical arbitrary command execution vulnerability affecting pulverizr through version 0.7.0. The flaw, residing in the "lib/job.js" file, allows an attacker to inject and execute arbitrary commands due to unsanitized input in the 'filename' variable used within an 'exec' call. This vulnerability carries a CVSS score of 9.8 (Critical), indicating a severe risk with a network-based attack vector, low attack complexity, and high impact on confidentiality, integrity, and availability. While no active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion has been observed, the high FAUCET Risk Score of 78/100 suggests a notable potential for exploitation.