Lucene search
Veracode Vulnerability DatabaseVERACODE:7625HistoryOct 22, 2018 - 5:46 a.m.
Command Injection
2018-10-2205:46:40
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
7
0.003 Low
EPSS
Percentile
71.6%
apex-publish-static-files is vulnerable to command injection. The connectionString argument is not sanitized when passed to execSync(), which allows a remote attacker to inject arbitrary shell commands via the connectionString argument.
| CPE | Name | Operator | Version |
|---|---|---|---|
| apex-publish-static-files | le | 2.0.0 |
Related
osv
osv
Command Injection in apex-publish-static-files
2018-11-01 14:48:50
CVE-2018-16462
2018-10-30 21:29:00
Command Injection in standard-version
2020-07-13 21:34:59
prion
prion
Command injection
2018-10-30 21:29:00
hackerone
hackerone
nvd
nvd
CVE-2018-16462
2018-10-30 21:29:00
cvelist
cvelist
CVE-2018-16462
2018-10-30 21:00:00
nodejs
nodejs
Command Injection
2018-11-01 14:09:00
cve
cve
CVE-2018-16462
2018-10-30 21:29:00
github
github
Command Injection in apex-publish-static-files
2018-11-01 14:48:50
Command Injection in standard-version
2020-07-13 21:34:59