Lucene search
Veracode Vulnerability DatabaseVERACODE:29225HistoryFeb 03, 2021 - 5:11 a.m.
OS Command Injection
2021-02-0305:11:41
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
4
0.004 Low
EPSS
Percentile
73.4%
total.js is vulnerable to OS command injection. The type parameter is not properly sanitized and validated, and is used to build the command which is subsequently executed using child_process.spawn.
Related
nvd
nvd
CVE-2020-28494
2021-02-02 11:15:13
cvelist
cvelist
CVE-2020-28494 Command Injection
2021-02-02 00:00:00
osv
osv
Command injection in total.js
2021-02-05 20:43:27
CVE-2020-28494
2021-02-02 11:15:13
github
github
Command injection in total.js
2021-02-05 20:43:27
cve
cve
CVE-2020-28494
2021-02-02 11:15:13
prion
prion
Design/Logic Flaw
2021-02-02 11:15:00
nodejs
nodejs
Command Injection
2021-02-23 02:24:40
openvas
openvas
Total.js < 3.4.7 Multiple Vulnerabilities
2021-02-08 00:00:00