Lucene search
Veracode Vulnerability DatabaseVERACODE:22279HistoryJan 13, 2020 - 12:54 a.m.
Arbitrary Code Injection
2020-01-1300:54:16
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
10
0.006 Low
EPSS
Percentile
78.2%
hot-formula-parser is vulnerable to arbitrary code injection. The vulnerability exists due to the lack of sanitization of the value of yytext, which is used in the exec command.
| CPE | Name | Operator | Version |
|---|---|---|---|
| hot-formula-parser | le | 3.0.0 | |
| hot-formula-parser | le | 3.0.0 | |
| hot-formula-parser | eq | 2.3.3 |
Related
osv
osv
CVE-2020-6836
2020-01-11 01:15:10
Command Injection in hot-formula-parser
2020-05-06 19:32:33
nvd
nvd
CVE-2020-6836
2020-01-11 01:15:10
nodejs
nodejs
Command Injection
2019-12-18 14:29:51
cve
cve
CVE-2020-6836
2020-01-11 01:15:10
cvelist
cvelist
CVE-2020-6836
2020-01-11 00:42:28
github
github
Command Injection in hot-formula-parser
2020-05-06 19:32:33
githubexploit
githubexploit
Exploit for Code Injection in Hot-Formula-Parser Project Hot-Formula-Parser
2020-12-01 09:45:48
prion
prion
Code injection
2020-01-11 01:15:00