Lucene search
GoogleOSV:GHSA-4GP3-P7PH-X2JRHistoryApr 14, 2020 - 11:09 p.m.
OS Command Injection in devcert-sanscache
2020-04-1423:09:00
Google
osv.dev
2
0.004 Low
EPSS
Percentile
73.5%
devcert-sanscache before 0.4.7 allows remote attackers to execute arbitrary code or cause a Command Injection via the exec function. The variable commonName controlled by user input is used as part of the exec function without any sanitization.
| CPE | Name | Operator | Version |
|---|---|---|---|
| devcert-sanscache | lt | 0.4.7 |
Related
cvelist
cvelist
CVE-2019-10778
2020-01-08 15:03:24
githubexploit
githubexploit
veracode
veracode
Command Injection
2020-01-09 04:00:17
nvd
nvd
CVE-2019-10778
2020-01-08 16:15:10
github
github
OS Command Injection in devcert-sanscache
2020-04-14 23:09:00
Command Injection in standard-version
2020-07-13 21:34:59
cve
cve
CVE-2019-10778
2020-01-08 16:15:10
prion
prion
Command injection
2020-01-08 16:15:00
osv
osv
Command Injection in standard-version
2020-07-13 21:34:59