Lucene search
Veracode Vulnerability DatabaseVERACODE:25655HistoryJun 11, 2020 - 6:32 a.m.
Remote Code Execution (RCE)
2020-06-1106:32:06
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
7
EPSS
0.062
Percentile
93.7%
access-policy is vulnerable to remote code execution (RCE). The attack is possible because user-provided data is directly executed by the eval in the template function without validation.
Related
prion
prion
Remote code execution
2020-06-10 16:15:00
cve
cve
CVE-2020-7674
2020-06-10 16:15:10
osv
osv
CVE-2020-7674
2020-06-10 16:15:10
Improper Input Validation in access-policy
2021-05-17 21:00:29
cvelist
cvelist
CVE-2020-7674
2020-06-10 15:36:01
nvd
nvd
CVE-2020-7674
2020-06-10 16:15:10
github
github
Improper Input Validation in access-policy
2021-05-17 21:00:29