Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:28945
HistoryJan 11, 2021 - 6:16 a.m.

Arbitrary Command Execution

2021-01-1106:16:39
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
4
arbitrary command execution
software vulnerability
host os

EPSS

0.007

Percentile

80.8%

ts-process-promises is vulnerable to arbitrary command execution. The usage of exec function allows an attacker to execute arbitrary commands on the host OS.

EPSS

0.007

Percentile

80.8%