Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:25734
HistoryJun 22, 2020 - 10:48 p.m.

OS Command Injection

2020-06-2222:48:05
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
3

0.002 Low

EPSS

Percentile

53.0%

limdu is vulnerable to command injection. The vulnerability exists because it allows an attacker to inject malicious code via the function trainBatch in BinaryClassifierSet.js as it relies on shell execution, such as SVM Perf, SVM Linear or Adaboos.

CPENameOperatorVersion
limdule0.9.4

0.002 Low

EPSS

Percentile

53.0%