Command Injection

Overview blackduck-c-cpp is a Scanning for c/c++ projects using blackduck and coverity tools Affected versions of this package are vulnerable to Command Injection via the package manager component. An attacker can execute arbitrary operating system commands by creating a file with shell...