CVE-2020-7697

This affects all versions of package mock2easy. a malicious user could inject commands through the _data variable: Affected Area require('../server/getJsonByCurl')(mock2easy, function (error, stdout) { if (error) { return res.json(500, error); } res.json(JSON.parse(stdout)); }, '', _data.interfaceUrl, query, _data.cookie,_data.interfaceType);

• CWE-77

• https://snyk.io/vuln/SNYK-JS-MOCK2EASY-572312Exploit, Third Party Advisory
• https://www.npmjs.com/package/mock2easyThird Party Advisory
• https://snyk.io/vuln/SNYK-JS-MOCK2EASY-572312Exploit, Third Party Advisory
• https://www.npmjs.com/package/mock2easyThird Party Advisory

Published

Jul 29, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-7691In all versions of the package jspdf, it is possible to use …6.1
• CVE-2020-7692PKCE support is not implemented in accordance with the RFC f…9.1
• CVE-2020-7693Incorrect handling of Upgrade header with the value websocke…5.3
• CVE-2020-7694This affects all versions of package uvicorn. The request lo…7.5
• CVE-2020-7695Uvicorn before 0.11.7 is vulnerable to HTTP response splitti…5.3
• CVE-2020-7696This affects all versions of package react-native-fast-image…5.3
• CVE-2020-7698This affects the package Gerapy from 0 and before 0.9.3. The…9.8
• CVE-2020-7699This affects the package express-fileupload before 1.1.8. If…9.8
• CVE-2020-7700All versions of phpjs are vulnerable to Prototype Pollution …9.8
• CVE-2020-7701madlib-object-utils before 0.1.7 is vulnerable to Prototype …9.8
• CVE-2020-7702All versions of package templ8 are vulnerable to Prototype P…9.8
• CVE-2020-7703All versions of package nis-utils are vulnerable to Prototyp…9.8