CVE-2020-23256

9.8 criticalEPSS 0.9%

Critical (9.8) in electerm project electerm. EPSS 0.9% chance of exploitation in the next 30 days.

An issue was discovered in Electerm 1.3.22, allows attackers to execute arbitrary code via unverified request to electerms service.

Severity

9.8 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.9% chance of exploitation in the next 30 days; higher than 59% of CVEs (scores of 2026-10-31)
CWE: CWE-306
Published: 2023-01-20
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Advisory	Ecosystem	Package	Affected	Fixed in
GHSA-x73w-g8hx-v7rp	npm	electerm	<=1.3.22	no fix published