Lucene search
Veracode Vulnerability DatabaseVERACODE:36348HistoryJul 14, 2022 - 4:07 a.m.
Command Injection
2022-07-1404:07:58
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
7
0.001 Low
EPSS
Percentile
30.4%
codecov is vulnerable to command injection. The vulnerability exists due to the lack of sanitization in the gcov arguments in the main function of __init__.py, allowing an attacker to inject and execute malicious commands before being provided to the Popen functionality.
Related
osv
osv
Codecov prior to 2.0.16 does not sanitize gcov arguments
2022-07-14 00:00:23
PYSEC-2022-238
2022-07-13 12:15:00
CVE-2019-10800
2022-07-13 12:15:08
openvas
openvas
openSUSE: Security Advisory for python-codecov (SUSE-SU-2022:2752-1)
2022-08-11 00:00:00
cvelist
cvelist
CVE-2019-10800 Command Injection
2022-07-13 00:00:00
nvd
nvd
CVE-2019-10800
2022-07-13 12:15:08
suse
suse
Security update for python-codecov (moderate)
2022-08-10 00:00:00
prion
prion
Security feature bypass
2022-07-13 12:15:00
cve
cve
CVE-2019-10800
2022-07-13 12:15:08
nessus
nessus
openSUSE 15 Security Update : python-codecov (SUSE-SU-2022:2752-1)
2023-01-20 00:00:00
github
github
Codecov prior to 2.0.16 does not sanitize gcov arguments
2022-07-14 00:00:23