Lucene search
Veracode Vulnerability DatabaseVERACODE:4967HistoryAug 25, 2017 - 8:56 a.m.
Remote Code Execution (RCE)
2017-08-2508:56:17
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
6
0.192 Low
EPSS
Percentile
96.3%
codiad/codiad is vulnerable to remote code execution (RCE) attacks. The library does not properly escape the filepath, allowing a malicious user to inject and execute arbitrary system commands. This CVE is different from CVE-2017-11366 and CVE-2017-15689.
| CPE | Name | Operator | Version |
|---|---|---|---|
| codiad/codiad | eq | 1.3.6 |
Related
checkpoint_advisories
checkpoint_advisories
nvd
nvd
CVE-2018-14009
2018-07-12 16:29:06
CVE-2017-11366
2017-08-21 01:29:00
CVE-2017-1000165
2017-08-21 00:29:00
prion
prion
Remote code execution
2018-07-12 16:29:00
Command injection
2017-08-21 01:29:00
osv
osv
CVE-2018-14009
2018-07-12 16:29:06
Codiad remote code execution vulnerability
2022-05-13 01:11:16
CVE-2017-11366
2017-08-21 01:29:00
github
github
Codiad remote code execution vulnerability
2022-05-13 01:11:16
Codiad Vulnerable to Shell Command Injection
2022-05-13 01:42:17
cve
cve
cvelist
cvelist
CVE-2018-14009
2018-07-12 16:00:00
CVE-2017-11366
2017-08-21 01:00:00
zdt
zdt
Codiad 2.8.4 - Remote Code Execution (Authenticated) Exploit
2021-03-23 00:00:00
veracode
veracode
Remote Command Execution (RCE)
2017-08-21 09:24:23
packetstorm
packetstorm
Codiad 2.8.4 Remote Code Execution
2021-03-24 00:00:00
exploitdb
exploitdb
Codiad 2.8.4 - Remote Code Execution (Authenticated)
2021-03-23 00:00:00