Lucene search
Veracode Vulnerability DatabaseVERACODE:29225HistoryFeb 03, 2021 - 5:11 a.m.
OS Command Injection
2021-02-0305:11:41
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
6
total.js
os command injection
unvalidated parameter
EPSS
0.004
Percentile
73.4%
total.js is vulnerable to OS command injection. The type parameter is not properly sanitized and validated, and is used to build the command which is subsequently executed using child_process.spawn.
Related
cvelist
cvelist
CVE-2020-28494 Command Injection
2021-02-02 10:25:22
nvd
nvd
CVE-2020-28494
2021-02-02 11:15:13
prion
prion
Design/Logic Flaw
2021-02-02 11:15:00
cve
cve
CVE-2020-28494
2021-02-02 11:15:13
github
github
Command injection in total.js
2021-02-05 20:43:27
osv
osv
Command injection in total.js
2021-02-05 20:43:27
CVE-2020-28494
2021-02-02 11:15:13
nodejs
nodejs
Command Injection
2021-02-23 02:24:40
openvas
openvas
Total.js < 3.4.7 Multiple Vulnerabilities
2021-02-08 00:00:00