Vulners
Lucene search
2 matches found
GHSA-PM52-WWRW-C282 Command Injection in wiki-plugin-datalog
Versions of wiki-plugin-datalog prior to 0.1.6 are vulnerable to Command Injection. The package failed to sanitize URLs on the curl endpoint, allowing attackers to inject commands and possibly achieving Remote Code Execution on the system. Recommendation Upgrade to version 0.1.6 or later...
6.5CVSS8.1AI score
Exploits0References3
Command Injection in wiki-plugin-datalog
Versions of wiki-plugin-datalog prior to 0.1.6 are vulnerable to Command Injection. The package failed to sanitize URLs on the curl endpoint, allowing attackers to inject commands and possibly achieving Remote Code Execution on the system. Recommendation Upgrade to version 0.1.6 or later...
7.2AI score
Exploits0References4Affected Software1
20