Lucene search
Veracode Vulnerability DatabaseVERACODE:22573HistoryFeb 25, 2020 - 7:07 a.m.
OS Command Injection
2020-02-2507:07:33
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
9
0.004 Low
EPSS
Percentile
72.8%
compile-sass is vulnerable to OS command injection. Lack of validation and sanitization allows an attacker to inject and execute arbitrary OS commands within the rm command in the function setupCleanupOnExit(cssPath) in dist/index.js.
| CPE | Name | Operator | Version |
|---|---|---|---|
| compile-sass | le | 1.0.4 | |
| compile-sass | le | 1.0.4 |
Related
nvd
nvd
CVE-2019-10799
2020-02-24 18:15:15
github
github
OS Command Injection in compile-sass
2021-04-13 15:23:13
osv
osv
OS Command Injection in compile-sass
2021-04-13 15:23:13
CVE-2019-10799
2020-02-24 18:15:15
cvelist
cvelist
CVE-2019-10799
2020-02-24 17:42:03
prion
prion
Command injection
2020-02-24 18:15:00
cve
cve
CVE-2019-10799
2020-02-24 18:15:15