Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:34790
HistoryMar 22, 2022 - 9:02 a.m.

Arbitrary Code Injection

2022-03-2209:02:27
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
11
accesslog
arbitrary code injection
compile function
javascript
vulnerability
software

EPSS

0.007

Percentile

80.0%

accesslog is vulnerable to arbitrary code injection. The vulnerability exists in compile function in compile.js due to lack of sanitization of inputs which allows an attacker to inject and execute arbitrary javascript code.

EPSS

0.007

Percentile

80.0%

Related for VERACODE:34790