Описание
OS Command Injection in devcert-sanscache
devcert-sanscache before 0.4.7 allows remote attackers to execute arbitrary code or cause a Command Injection via the exec function. The variable commonName controlled by user input is used as part of the exec function without any sanitization.
Пакеты
Наименование
devcert-sanscache
npm
Затронутые версииВерсия исправления
< 0.4.7
0.4.7
Связанные уязвимости
CVSS3: 9.8
nvd
около 6 лет назад
devcert-sanscache before 0.4.7 allows remote attackers to execute arbitrary code or cause a Command Injection via the exec function. The variable `commonName` controlled by user input is used as part of the `exec` function without any sanitization.