1 matches found
GHSA-4GP3-P7PH-X2JR OS Command Injection in devcert-sanscache
devcert-sanscache before 0.4.7 allows remote attackers to execute arbitrary code or cause a Command Injection via the exec function. The variable commonName controlled by user input is used as part of the exec function without any sanitization...
9.8CVSS7.6AI score0.03453EPSS
SaveExploits0References3
20