Lucene search
Veracode Vulnerability DatabaseVERACODE:25369HistoryMay 11, 2020 - 12:43 a.m.
OS Command Injection
2020-05-1100:43:16
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
5
0.01 Low
EPSS
Percentile
83.3%
logkitty is vulnerable to OS Command Injection. The vulnerability exists as the variable adbPath is not sanitized and can reach execSync.
Related
cve
cve
CVE-2020-8149
2020-05-15 19:15:12
prion
prion
Design/Logic Flaw
2020-05-15 19:15:00
osv
osv
CVE-2020-8149
2020-05-15 19:15:12
Arbitrary shell command execution in logkitty
2020-06-05 14:47:02
hackerone
hackerone
Node.js third-party modules: [logkitty] RCE via insecure command formatting
2020-03-21 00:53:36
github
github
Arbitrary shell command execution in logkitty
2020-06-05 14:47:02
githubexploit
githubexploit
Exploit for Code Injection in Logkitty Project Logkitty
2020-12-01 09:45:48
huntr
huntr
Command Injection in zamotany/logkitty
2020-03-27 00:00:00
cvelist
cvelist
CVE-2020-8149
2020-05-15 18:50:27
nvd
nvd
CVE-2020-8149
2020-05-15 19:15:12