CVE-2022-25350 Information

Description

All versions of the package puppet-facter are vulnerable to Command Injection via the getFact function due to improper input sanitization.

Reference

https://github.com/olindata/node-puppet-facter/blob/f34bcc754325d71bb3b1b534804e53d6170f15f5/index.js%23L10 https://security.snyk.io/vuln/SNYK-JS-PUPPETFACTER-3175616