Lucene search
+L

2 matches found

OSV
OSV
added 2019/06/13 6:59 p.m.9 views

GHSA-PM52-WWRW-C282 Command Injection in wiki-plugin-datalog

Versions of wiki-plugin-datalog prior to 0.1.6 are vulnerable to Command Injection. The package failed to sanitize URLs on the curl endpoint, allowing attackers to inject commands and possibly achieving Remote Code Execution on the system. Recommendation Upgrade to version 0.1.6 or later...

6.5CVSS8.1AI score
SaveExploits0References3
Github Security Blog
Github Security Blog
added 2019/06/13 6:59 p.m.14 views

Command Injection in wiki-plugin-datalog

Versions of wiki-plugin-datalog prior to 0.1.6 are vulnerable to Command Injection. The package failed to sanitize URLs on the curl endpoint, allowing attackers to inject commands and possibly achieving Remote Code Execution on the system. Recommendation Upgrade to version 0.1.6 or later...

7.2AI score
SaveExploits0References4Affected Software1
Rows per page
Query Builder