Lucene search
K

10 matches found

RedhatCVE
RedhatCVE
added 2025/05/22 7:50 p.m.4 views

CVE-2021-34079

OS Command injection vulnerability in Mintzo Docker-Tester through 1.2.1 allows attackers to execute arbitrary commands via shell metacharacters in the 'ports' entry of a crafted docker-compose.yml file...

10CVSS8AI score0.10238EPSS
Exploits1References1
Veracode
Veracode
added 2022/06/06 2:59 a.m.26 views

OS Command Injection

docker-tester is vulnerable to OS command injection. The vulnerability exists in the port attribute in the getExternalPort function of docker-compose.js, allowing an attacker to inject and execute malicious commands through the docker-compose.yml by providing shell meta characters...

9.8CVSS9.5AI score0.10238EPSS
Exploits1References5Affected Software1
Github Security Blog
Github Security Blog
added 2022/06/03 12:0 a.m.23 views

Command injection in docker-tester

OS Command injection vulnerability in Mintzo Docker-Tester through 1.2.1 allows attackers to execute arbitrary commands via shell metacharacters in the 'ports' entry of a crafted docker-compose.yml file...

10CVSS9.6AI score0.10238EPSS
Exploits1References4Affected Software1
OSV
OSV
added 2022/06/03 12:0 a.m.21 views

GHSA-RJ88-4777-828H Command injection in docker-tester

OS Command injection vulnerability in Mintzo Docker-Tester through 1.2.1 allows attackers to execute arbitrary commands via shell metacharacters in the 'ports' entry of a crafted docker-compose.yml file...

10CVSS9.8AI score0.10238EPSS
Exploits1References4
OSV
OSV
added 2022/06/02 2:15 p.m.0 views

CVE-2021-34079

OS Command injection vulnerability in Mintzo Docker-Tester through 1.2.1 allows attackers to execute arbitrary commands via shell metacharacters in the 'ports' entry of a crafted docker-compose.yml file...

9.8CVSS7.5AI score
Exploits0References2
NVD
NVD
added 2022/06/02 2:15 p.m.9 views

CVE-2021-34079

OS Command injection vulnerability in Mintzo Docker-Tester through 1.2.1 allows attackers to execute arbitrary commands via shell metacharacters in the 'ports' entry of a crafted docker-compose.yml file...

10CVSS0.10238EPSS
Exploits1References2
Prion
Prion
added 2022/06/02 2:15 p.m.10 views

Command injection

OS Command injection vulnerability in Mintzo Docker-Tester through 1.2.1 allows attackers to execute arbitrary commands via shell metacharacters in the 'ports' entry of a crafted docker-compose.yml file...

10CVSS9.7AI score0.10238EPSS
Exploits1References2Affected Software1
CNNVD
CNNVD
added 2022/06/02 12:0 a.m.2 views

Docker-Tester 操作系统命令注入漏洞

Docker-Tester uses docker-compose files to set up test environments and verify them before running tests. A security vulnerability exists in version 1.2.1 of Docker-Tester, which can be exploited by an attacker to maliciously execute operating system commands...

10CVSS8.4AI score0.10238EPSS
Exploits1References3
CVE
CVE
added 2022/06/01 2:31 p.m.65 views

CVE-2021-34079

CVE-2021-34079 affects Mintzo Docker-Tester up to version 1.2.1. The Red Hat, Veracode, GitHub advisories and CVE records describe an OS command injection vulnerability in the docker-tester tooling, exploitable via shell metacharacters in the ports entry of a crafted docker-compose.yml file. The ...

10CVSS9.7AI score0.10238EPSS
Exploits1References2Affected Software1
Cvelist
Cvelist
added 2022/06/01 2:31 p.m.14 views

CVE-2021-34079

OS Command injection vulnerability in Mintzo Docker-Tester through 1.2.1 allows attackers to execute arbitrary commands via shell metacharacters in the 'ports' entry of a crafted docker-compose.yml file...

10AI score0.10238EPSS
Exploits1References2
Rows per page
Query Builder