Lucene search
Cristian-Alexandru StaicuNODEJS:523HistorySep 06, 2017 - 11:32 p.m.
Command Injection
2017-09-0623:32:56
Cristian-Alexandru Staicu
www.npmjs.com
91
EPSS
0.008
Percentile
82.2%
Overview
Affected versions of dns-sync have an arbitrary command execution vulnerability in the resolve() method.
Recommendation
- Use an alternative dns resolver
- Do not allow untrusted input into
dns-sync.resolve()
References
Related
cvelist
cvelist
CVE-2017-16100
2018-06-07 02:00:00
veracode
veracode
Command Injection
2019-07-10 04:47:02
Arbitrary Command Execution Through Shell Metacharacters In API Arguments
2015-03-02 16:29:41
osv
osv
Command Injection in dns-sync
2018-07-18 18:28:02
Command Injection in standard-version
2020-07-13 21:34:59
nvd
nvd
CVE-2017-16100
2018-06-07 02:29:02
github
github
Command Injection in dns-sync
2018-07-18 18:28:02
Command Injection in standard-version
2020-07-13 21:34:59
cve
cve
CVE-2017-16100
2018-06-07 02:29:02
prion
prion
Command injection
2018-06-07 02:29:00