Lucene search
+L

1 matches found

OSV
OSV
added 2022/09/30 4:29 a.m.101 views

GHSA-CXGF-V2P8-7PH7 NuProcess vulnerable to command-line injection through insertion of NUL character(s)

Impact In all the versions of NuProcess where it forks processes by using the JVM's JavajavalangUNIXProcessforkAndExec method 1.2.0+, attackers can use NUL characters in their strings to perform command line injection. Java's ProcessBuilder isn't vulnerable because of a check in...

8.4CVSS5.9AI score0.01221EPSS
SaveExploits1References5
Rows per page
Query Builder