Arbitrary File Write

2021-06-0804:12:05

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

0.001 Low

EPSS

Percentile

42.6%

JSON

calipso is vulnerable to arbitrary file write. A malicious module can overwrite files on an arbitrary file system through the module install functionality.

CPENameOperatorVersion
calipsole0.3.54

CPE	Name	Operator	Version
	calipso	le	0.3.54

References

consumer.huawei.com/en/support/bulletin/2021/6/

github.com/cliftonc/calipso/blob/a730b00c8baf9c71940e87a9c12b49b87939b45e/lib/cli/Modules.js#L49-L62

0.001 Low

EPSS

Percentile

42.6%

JSON

Related for VERACODE:30871