Arbitrary Code Execution

github.com/stripe/stripe-cli is vulnerable to Arbitrary Code Execution. An attacker can inject and execute malicious commands through the stripe login, stripe config -e, stripe community, and stripe open in windows...

CVE-2022-24753

Stripe CLI is a command-line tool for the Stripe eCommerce platform. A vulnerability in Stripe CLI exists on Windows when certain commands are run in a directory where an attacker has planted files. The commands are stripe login, stripe config -e, stripe community, and stripe open. MacOS and Linu...

Code injection

Stripe CLI is a command-line tool for the Stripe eCommerce platform. A vulnerability in Stripe CLI exists on Windows when certain commands are run in a directory where an attacker has planted files. The commands are stripe login, stripe config -e, stripe community, and stripe open. MacOS and Linu...

CVE-2022-24753 Code injection in Stripe CLI on windows

Stripe CLI is a command-line tool for the Stripe eCommerce platform. A vulnerability in Stripe CLI exists on Windows when certain commands are run in a directory where an attacker has planted files. The commands are stripe login, stripe config -e, stripe community, and stripe open. MacOS and Linu...

CVE-2022-24753

CVE-2022-24753 describes a Windows-specific vulnerability in the Stripe CLI where if certain commands are run in a directory with attacker-planted files, an attacker could execute arbitrary code under the current user. Affected commands include stripe login, stripe config -e, stripe community, an...

CVE-2022-24753 Code injection in Stripe CLI on windows

Stripe CLI is a command-line tool for the Stripe eCommerce platform. A vulnerability in Stripe CLI exists on Windows when certain commands are run in a directory where an attacker has planted files. The commands are stripe login, stripe config -e, stripe community, and stripe open. MacOS and Linu...

CVE-2022-24753 Code injection in Stripe CLI on windows

Stripe CLI is a command-line tool for the Stripe eCommerce platform. A vulnerability in Stripe CLI exists on Windows when certain commands are run in a directory where an attacker has planted files. The commands are stripe login, stripe config -e, stripe community, and stripe open. MacOS and Linu...

PT-2022-16856 · Stripe · Stripe Cli

Name of the Vulnerable Software and Affected Versions: Stripe CLI versions prior to 1.7.13 Description: A vulnerability exists in Stripe CLI on Windows when certain commands are run in a directory where an attacker has planted files. The affected commands are stripe login, stripe config -e, strip...

Stripe CLI 操作系统命令注入漏洞

Stripe CLI is a command line tool for the Stripe e-commerce platform from Stripe Ireland. Stripe CLI suffers from an operating system command injection vulnerability that can be exploited by an attacker to run arbitrary code in the current user's environment...

WordPress WordPress Stripe Donation and Payment Plugin plugin < 2.9 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress WordPress Stripe Donation and Payment Plugin plugin versions 2.9. Solution Update the WordPress WordPress Stripe Donation and Payment Plugin plugin to the latest available version at least 2.9...

WordPress LittleBot ACH for Stripe + Plaid plugin <= 1.2.8 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress LittleBot ACH for Stripe + Plaid plugin versions = 1.2.8. Solution No patched version available...

WordPress BSD Split Pay for Stripe Connect on Woo plugin <= 3.2.0 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress BSD Split Pay for Stripe Connect on Woo plugin versions = 3.2.0. Solution Update the WordPress BSD Split Pay for Stripe Connect on Woo plugin to the latest available version at least 3.2.1...

WordPress WordPress Stripe Donation and Payment Plugin plugin < 2.9 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress WordPress Stripe Donation and Payment Plugin plugin versions 2.9. Solution Update the WordPress WordPress Stripe Donation and Payment Plugin plugin to the latest available version at least 2.9...

WordPress LittleBot ACH for Stripe + Plaid plugin <= 1.2.8 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress LittleBot ACH for Stripe + Plaid plugin versions = 1.2.8. Solution No patched version available...

WordPress Pay With Stripe – Your WordPress Payments Stripe Gateway plugin <= 1.2 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Pay With Stripe – Your WordPress Payments Stripe Gateway plugin versions = 1.2. Solution Update the Pay With Stripe – Your WordPress Payments Stripe Gateway plugin to the latest available version at...

WordPress Stripe Express plugin < 1.7.7 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress Stripe Express plugin versions 1.7.7. Solution Update the WordPress Stripe Express plugin to the latest available version at least 1.7.7...

WordPress BSD Split Pay for Stripe Connect on Woo plugin <= 3.2.0 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress BSD Split Pay for Stripe Connect on Woo plugin versions = 3.2.0. Solution Update the WordPress BSD Split Pay for Stripe Connect on Woo plugin to the latest available version at least 3.2.1...

WordPress Pay With Stripe – Your WordPress Payments Stripe Gateway plugin <= 1.2 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress Pay With Stripe – Your WordPress Payments Stripe Gateway plugin versions = 1.2. Solution Update the Pay With Stripe – Your WordPress Payments Stripe Gateway plugin to the latest available version at least 1.2.1...

WordPress WPFormify – Stripe Payments with Form and Checkout plugin <= 1.0.0 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress WPFormify – Stripe Payments with Form and Checkout plugin versions = 1.0.0. Solution Update the WordPress WPFormify – Stripe Payments with Form and Checkout plugin to the latest available version at...

WordPress WPFormify – Stripe Payments with Form and Checkout plugin <= 1.0.0 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress WPFormify – Stripe Payments with Form and Checkout plugin versions = 1.0.0. Solution Update the WordPress WPFormify – Stripe Payments with Form and Checkout plugin to the latest available version at least 1.1.0...