Lucene search
Veracode Vulnerability DatabaseVERACODE:30024HistoryApr 19, 2021 - 5:08 a.m.
Arbitrary Code Execution
2021-04-1905:08:31
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
5
picotts
arbitrary code execution
vulnerability
user-provided input
child_process.exec
sanitization
EPSS
0.005
Percentile
76.1%
picotts is vulnerable to arbitrary code execution. The vulnerability exists due to the lack of sanitization of user-provided input to the say function which is subsequently parsed in the child_process.exec function.
Related
osv
osv
Command Injection in picotts
2021-05-07 16:06:11
cve
cve
CVE-2021-23378
2021-04-18 19:15:12
cvelist
cvelist
CVE-2021-23378 Arbitrary Command Injection
2021-04-18 18:40:14
nvd
nvd
CVE-2021-23378
2021-04-18 19:15:12
alpinelinux
alpinelinux
CVE-2021-23378
2021-04-18 19:15:12
prion
prion
Design/Logic Flaw
2021-04-18 19:15:00
github
github
Command Injection in picotts
2021-05-07 16:06:11