Lucene search
Veracode Vulnerability DatabaseVERACODE:22721HistoryMar 17, 2020 - 6:03 a.m.
OS Command Injection
2020-03-1706:03:10
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
9
0.01 Low
EPSS
Percentile
83.8%
closure-compiler-stream is vulnerable to OS command injection. The args options are passed to the exec function without any validation and sanitization, allowing an attacker to inject and execute arbitrary OS commands.
| CPE | Name | Operator | Version |
|---|---|---|---|
| closure-compiler-stream | le | 0.1.15 |
Related
osv
osv
OS Command Injection in closure-compiler-stream
2021-05-07 16:16:06
cve
cve
CVE-2020-7603
2020-03-15 22:15:14
cvelist
cvelist
CVE-2020-7603
2020-03-15 21:48:52
prion
prion
Code injection
2020-03-15 22:15:00
nvd
nvd
CVE-2020-7603
2020-03-15 22:15:14
github
github
OS Command Injection in closure-compiler-stream
2021-05-07 16:16:06