Lucene search
Veracode Vulnerability DatabaseVERACODE:22463HistoryFeb 05, 2020 - 4:10 a.m.
OS Command Injection
2020-02-0504:10:53
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
13
0.001 Low
EPSS
Percentile
34.1%
strapi is vulnerable to OS command injection. An attacker with administrative privileges is able to inject and execute arbitrary OS commands on the system via the install and uninstall plugins module due to a lack of validation in the plugin name.
| CPE | Name | Operator | Version |
|---|---|---|---|
| strapi | le | 3.0.0-beta.18.3 |
References
Related
osv
osv
Uncontrolled Resource Consumption in strapi
2021-12-10 17:22:01
CVE-2020-8123
2020-02-04 20:15:14
prion
prion
Denial of service
2020-02-04 20:15:00
cve
cve
CVE-2020-8123
2020-02-04 20:15:14
hackerone
hackerone
cvelist
cvelist
CVE-2020-8123
2020-02-04 19:08:57
github
github
Uncontrolled Resource Consumption in strapi
2021-12-10 17:22:01
nvd
nvd
CVE-2020-8123
2020-02-04 20:15:14