Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:32769
HistoryNov 01, 2021 - 3:45 a.m.

Remote Code Execution (RCE)

2021-11-0103:45:31
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
5
rce
aaptjs
vulnerability
user-provided data
filepath
malicious code

EPSS

0.004

Percentile

72.4%

aaptjs is vulnerable to remote code execution. The vulnerability exists because of lack of sanitization of user-provided data in the add function, allowing an attacker to provide malicious code via its filePath parameter.

EPSS

0.004

Percentile

72.4%

Related for VERACODE:32769