Lucene search

K
osvGoogleOSV:GHSA-9JM3-5835-537M
HistoryNov 01, 2018 - 2:48 p.m.

Command Injection in apex-publish-static-files

2018-11-0114:48:50
Google
osv.dev
8

0.003 Low

EPSS

Percentile

71.7%

Versions of apex-publish-static-files before 2.0.1 are vulnerable to command injection. This is exploitable if user input is passed into the connectString option in the publish method.

Recommendation

Update to version 2.0.1 or later.

CPENameOperatorVersion
apex-publish-static-fileslt2.0.1

0.003 Low

EPSS

Percentile

71.7%