Lucene search
Veracode Vulnerability DatabaseVERACODE:22719HistoryMar 17, 2020 - 5:59 a.m.
OS Command Injection
2020-03-1705:59:05
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
8
0.01 Low
EPSS
Percentile
83.9%
docker-compose-remote-api is vulnerable to OS command injection. An attacker is able to inject and execute arbitrary OS commands via the serviceName parameter due to lack of validation before passing to the exec function.
| CPE | Name | Operator | Version |
|---|---|---|---|
| docker-compose-remote-api | le | 0.1.4 |
Related
cve
cve
CVE-2020-7606
2020-03-15 22:15:14
osv
osv
OS Command Injection in docker-compose-remote-api
2021-05-07 16:14:39
github
github
OS Command Injection in docker-compose-remote-api
2021-05-07 16:14:39
prion
prion
Design/Logic Flaw
2020-03-15 22:15:00
nvd
nvd
CVE-2020-7606
2020-03-15 22:15:14
cvelist
cvelist
CVE-2020-7606
2020-03-15 21:31:11