Lucene search
Veracode Vulnerability DatabaseVERACODE:22268HistoryJan 09, 2020 - 4:00 a.m.
Command Injection
2020-01-0904:00:17
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
7
0.004 Low
EPSS
Percentile
73.4%
devcert-sanscache is vulnerable to OS command injection. The commonName parameter used to generate a developer SSL certificate is not validated and sanitized, allowing for command injection as the value is subsequently passed into an exec function.
| CPE | Name | Operator | Version |
|---|---|---|---|
| devcert-sanscache | le | 0.4.6 |
Related
nvd
nvd
CVE-2019-10778
2020-01-08 16:15:10
githubexploit
githubexploit
cvelist
cvelist
CVE-2019-10778
2020-01-08 15:03:24
osv
osv
OS Command Injection in devcert-sanscache
2020-04-14 23:09:00
Command Injection in standard-version
2020-07-13 21:34:59
github
github
OS Command Injection in devcert-sanscache
2020-04-14 23:09:00
Command Injection in standard-version
2020-07-13 21:34:59
prion
prion
Command injection
2020-01-08 16:15:00
cve
cve
CVE-2019-10778
2020-01-08 16:15:10