CVEs-PoC/2020/CVE-2020-15095.md

CVE-2020-15095

Description

Versions of the npm CLI prior to 6.14.6 are vulnerable to an information exposure vulnerability through log files. The CLI supports URLs like "://[[:]@][:][:][/]". The password value is not redacted and is printed to stdout and also to any generated log files.

POC

Reference

No PoCs from references.

Github

• https://github.com/ossf-cve-benchmark/CVE-2020-15095