Lucene search
GoogleOSV:GHSA-Q6PJ-JH94-5FPRHistoryMay 07, 2021 - 4:14 p.m.
OS Command Injection in docker-compose-remote-api
2021-05-0716:14:39
Google
osv.dev
9
0.01 Low
EPSS
Percentile
83.9%
docker-compose-remote-api through 0.1.4 allows execution of arbitrary commands. Within index.js of the package, the function exec(serviceName, cmd, fnStdout, fnStderr, fnExit) uses the variable serviceName which can be controlled by users without any sanitization.
| CPE | Name | Operator | Version |
|---|---|---|---|
| docker-compose-remote-api | le | 0.1.4 |
Related
cve
cve
CVE-2020-7606
2020-03-15 22:15:14
github
github
OS Command Injection in docker-compose-remote-api
2021-05-07 16:14:39
prion
prion
Design/Logic Flaw
2020-03-15 22:15:00
nvd
nvd
CVE-2020-7606
2020-03-15 22:15:14
cvelist
cvelist
CVE-2020-7606
2020-03-15 21:31:11
veracode
veracode
OS Command Injection
2020-03-17 05:59:05