Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:22934
HistoryApr 03, 2020 - 10:38 a.m.

OS Command Injection

2020-04-0310:38:32
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
8

EPSS

0.006

Percentile

78.1%

strong-nginx-controller is vulnerable to OS command injection. Lack of validation and sanitization of the action parameter allows an attacker to inject and execute arbitrary OS commands via the _nginxCmd function.

EPSS

0.006

Percentile

78.1%

Related for VERACODE:22934