Lucene search
SnykCVELIST:CVE-2020-7606HistoryMar 15, 2020 - 9:31 p.m.
CVE-2020-7606
2020-03-1521:31:11
snyk
www.cve.org
docker-compose-remote-api through 0.1.4 allows execution of arbitrary commands. Within ‘index.js’ of the package, the function ‘exec(serviceName, cmd, fnStdout, fnStderr, fnExit)’ uses the variable ‘serviceName’ which can be controlled by users without any sanitization.
CNA Affected
[
{
"product": "docker-compose-remote-api",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "All versions including 0.1.4"
}
]
}
]Related
cve
cve
CVE-2020-7606
2020-03-15 22:15:14
osv
osv
OS Command Injection in docker-compose-remote-api
2021-05-07 16:14:39
github
github
OS Command Injection in docker-compose-remote-api
2021-05-07 16:14:39
prion
prion
Design/Logic Flaw
2020-03-15 22:15:00
nvd
nvd
CVE-2020-7606
2020-03-15 22:15:14
veracode
veracode
OS Command Injection
2020-03-17 05:59:05