Lucene search
PRIOn knowledge basePRION:CVE-2020-7606HistoryMar 15, 2020 - 10:15 p.m.
Design/Logic Flaw
2020-03-1522:15:00
PRIOn knowledge base
www.prio-n.com
2
docker-compose-remote-api through 0.1.4 allows execution of arbitrary commands. Within ‘index.js’ of the package, the function ‘exec(serviceName, cmd, fnStdout, fnStderr, fnExit)’ uses the variable ‘serviceName’ which can be controlled by users without any sanitization.
| CPE | Name | Operator | Version |
|---|---|---|---|
| docker-compose-remote-api | le | 0.1.4 |
Related
cve
cve
CVE-2020-7606
2020-03-15 22:15:14
osv
osv
OS Command Injection in docker-compose-remote-api
2021-05-07 16:14:39
github
github
OS Command Injection in docker-compose-remote-api
2021-05-07 16:14:39
nvd
nvd
CVE-2020-7606
2020-03-15 22:15:14
cvelist
cvelist
CVE-2020-7606
2020-03-15 21:31:11
veracode
veracode
OS Command Injection
2020-03-17 05:59:05