Lucene search
Veracode Vulnerability DatabaseVERACODE:25409HistoryMay 14, 2020 - 4:07 a.m.
OS Command Injection
2020-05-1404:07:50
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
6
EPSS
0.008
Percentile
81.3%
curlrequest is vulnerable to OS command injection. It is possible to inject and execute arbitrary OS commands via the URL parameter due to lack of validation and sanitization before passing the values to exec.
Related
osv
osv
CVE-2020-7646
2020-05-07 17:15:12
curlrequest allows execution of arbitrary commands
2020-05-13 16:29:43
Command Injection in standard-version
2020-07-13 21:34:59
prion
prion
Input validation
2020-05-07 17:15:00
cvelist
cvelist
CVE-2020-7646
2020-05-07 16:34:39
nvd
nvd
CVE-2020-7646
2020-05-07 17:15:12
cve
cve
CVE-2020-7646
2020-05-07 17:15:12
veracode
veracode
Command Injection
2020-05-08 09:24:28
github
github
curlrequest allows execution of arbitrary commands
2020-05-13 16:29:43
Command Injection in standard-version
2020-07-13 21:34:59