Lucene search
Veracode Vulnerability DatabaseVERACODE:22370HistoryJan 28, 2020 - 2:31 a.m.
OS Command Injection
2020-01-2802:31:25
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
6
0.006 Low
EPSS
Percentile
79.1%
codecov is vulnerable to OS command injection. Lack of validation and sanitization of the gcov-args allows an attacker to inject and execute arbitrary OS commands on the system.
Related
osv
osv
Improper Neutralization of Special Elements in Output Used by a Downstream Component in Codecov
2022-05-24 17:07:19
CVE-2020-7597
2020-02-17 19:15:12
codecov NPM module allows remote attackers to execute arbitrary commands
2020-02-19 17:29:39
prion
prion
Command injection
2020-01-25 19:15:00
Design/Logic Flaw
2020-02-17 19:15:00
cve
cve
CVE-2020-7596
2020-01-25 19:15:12
CVE-2020-7597
2020-02-17 19:15:12
nvd
nvd
CVE-2020-7596
2020-01-25 19:15:12
CVE-2020-7597
2020-02-17 19:15:12
cvelist
cvelist
CVE-2020-7596
2020-01-25 18:08:41
CVE-2020-7597
2020-02-17 18:48:40
github
github
veracode
veracode
Remote Code Execution (RCE)
2020-02-18 03:57:59