Lucene search

K
nodejsAbdillah MuhamadNODEJS:718
HistoryNov 01, 2018 - 2:09 p.m.

Command Injection

2018-11-0114:09:00
Abdillah Muhamad
www.npmjs.com
6

0.003 Low

EPSS

Percentile

71.7%

Overview

Versions of apex-publish-static-files before 2.0.1 are vulnerable to command injection. This is exploitable if user input is passed into the connectString option in the publish method.

Recommendation

Update to version 2.0.1 or later.

References

CPENameOperatorVersion
apex-publish-static-filesle2.0.0

0.003 Low

EPSS

Percentile

71.7%