Lucene search

K
osvGoogleOSV:GHSA-8936-CGJ4-PHR2
HistoryMay 14, 2022 - 3:44 a.m.

Echor contains Command Injection

2022-05-1403:44:50
Google
osv.dev
5

0.0004 Low

EPSS

Percentile

5.1%

The perform_request function in /lib/echor/backplane.rb in echor 0.1.6 Ruby Gem allows local users to inject arbitrary code by adding a semi-colon in their username or password.

CPENameOperatorVersion
echoreq0.1.4
echoreq0.1.6
echoreq0.1.5

0.0004 Low

EPSS

Percentile

5.1%

Related for OSV:GHSA-8936-CGJ4-PHR2