Lucene search

K
osvGoogleOSV:GHSA-M8XJ-5V73-3HH8
HistoryMay 13, 2020 - 4:29 p.m.

curlrequest allows execution of arbitrary commands

2020-05-1316:29:43
Google
osv.dev
7

EPSS

0.008

Percentile

81.3%

curlrequest through 1.0.1 allows execution of arbitrary commands. It is possible to inject arbitrary commands by using a semicolon char in any of the options values.

EPSS

0.008

Percentile

81.3%

Related for OSV:GHSA-M8XJ-5V73-3HH8