Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
githubGitHub Advisory DatabaseGHSA-JCCV-3H4X-35MV
HistoryMay 13, 2022 - 1:42 a.m.

Codiad Vulnerable to Shell Command Injection

2022-05-1301:42:17
CWE-78
GitHub Advisory Database
github.com
5

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.7 High

AI Score

Confidence

High

0.041 Low

EPSS

Percentile

92.2%

JSON

components/filemanager/class.filemanager.php in Codiad before 2.8.3 is vulnerable to remote command execution because shell commands can be embedded in parameter values, as demonstrated by search_file_type.

Affected configurations

Vulners
Node
codiadcodiadRange<2.8.3
CPENameOperatorVersion
codiad/codiadlt2.8.3

Related

prion 2
osv 4
cve 4
veracode 2
nvd 4
cvelist 2
github 1
checkpoint_advisories 1
prion
prion
Command injection
2017-08-21 01:29:00
Remote code execution
2018-07-12 16:29:00
osv
osv
CVE-2017-11366
2017-08-21 01:29:00
Codiad Vulnerable to Shell Command Injection
2022-05-13 01:42:17
CVE-2018-14009
2018-07-12 16:29:06
cve
cve
CVE-2017-11366
2017-08-21 01:29:00
CVE-2017-1000165
2022-10-03 16:23:10
CVE-2017-1000124
2022-10-03 16:23:10
veracode
veracode
Remote Command Execution (RCE)
2017-08-21 09:24:23
Remote Code Execution (RCE)
2017-08-25 08:56:17
nvd
nvd
CVE-2017-11366
2017-08-21 01:29:00
CVE-2017-1000124
2017-08-21 01:29:00
CVE-2017-1000165
2017-08-21 00:29:00
cvelist
cvelist
CVE-2017-11366
2017-08-21 01:00:00
CVE-2018-14009
2018-07-12 16:00:00
github
github
Codiad remote code execution vulnerability
2022-05-13 01:11:16
checkpoint_advisories
checkpoint_advisories
Codiad Remote Code Execution (CVE-2018-14009; CVE-2017-11366; CVE-2017-15689)
2021-04-05 00:00:00

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.7 High

AI Score

Confidence

High

0.041 Low

EPSS

Percentile

92.2%

JSON
Related for GHSA-JCCV-3H4X-35MV
prion2osv4cve4veracode2nvd4cvelist2github1checkpoint_advisories1