WS-2019-0242

soletta-dev-app all versions are vulnerable to Command Injection when not validating user input on the /api/service/status API endpoint, passing contents of the service query parameter to an exec call...

GHSA-8MGG-5X65-M4M4 Command Injection in soletta-dev-app

All versions of soletta-dev-app are vulnerable to Command Injection. The package does not validate user input on the /api/service/status API endpoint, passing contents of the service query parameter to an exec call. This may allow attackers to run arbitrary commands in the system. Recommendation ...

Command Injection in soletta-dev-app

All versions of soletta-dev-app are vulnerable to Command Injection. The package does not validate user input on the /api/service/status API endpoint, passing contents of the service query parameter to an exec call. This may allow attackers to run arbitrary commands in the system. Recommendation ...

PT-2020-21168

Name of the Vulnerable Software and Affected Versions soletta-dev-app versions affected versions not specified Description The issue concerns a lack of validation for user input on the "/api/service/status" API endpoint. Specifically, the contents of the service query parameter are passed to an...

Command Injection

Overview All versions of soletta-dev-app are vulnerable to Command Injection. The package does not validate user input on the /api/service/status API endpoint, passing contents of the service query parameter to an exec call. This may allow attackers to run arbitrary commands in the system...