Ras Collection Instrument
Approved changes feed: RSS · Atom
cpe:2.3:a:ons:ras_collection_instrument:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Ons (b73e8f11-5502-546a-b44b-523a209db6c8) |
|---|---|
| Product | Ras Collection Instrument (7b120130-c2ed-53c3-ba0a-e3743dbc51ca) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from purl2cpe mapping
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/onsdigital/ras-collection-instrument |
purl2cpe | 2026-06-01 10:16:47.333428 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2020-36762 |
vulnerable | 2026-06-08 05:25:49.562025 |
ONS Digital RAS Collection Instrument comment.yml jobs os command injection
MEDIUM (5.5)
A vulnerability was found in ONS Digital RAS Collection Instrument up to 2.0.27 and classified as critical. Affected by this issue is the function jobs of the file .github/workflows/comment.yml. The manipulation of the argument $COMMENT_BODY leads to os command injection. Upgrading to version 2.0.28 is able to address this issue. The name of the patch is dcaad2540f7d50c512ff2e031d3778dd9337db2b. It is recommended to upgrade the affected component. The identifier of this vulnerability is VDB-234248.
Published: 2023-07-18T15:00:04.532Z
Updated: 2024-08-04T17:37:07.266Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.