Lucene search
Veracode Vulnerability DatabaseVERACODE:34917HistoryApr 01, 2022 - 3:24 a.m.
Command Injection
2022-04-0103:24:07
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
6
command injection
asciidoctor-include-ext
vulnerability
system commands
operating system
disable allow-uri-read
EPSS
0.004
Percentile
74.9%
asciidoctor-include-ext is vulnerable to command injection. The library renders user-supplied input in AsciiDoc markup, which allows an attacker to execute arbitrary system commands on the host operating system when the allow-uri-read is disabled.
Related
debiancve
debiancve
CVE-2022-24803
2022-04-01 00:15:08
rubygems
rubygems
Command Injection vulnerability in asciidoctor-include-ext
2022-03-30 21:00:00
osv
osv
CVE-2022-24803
2022-04-01 00:15:08
Command Injection vulnerability in asciidoctor-include-ext
2022-03-31 23:27:15
prion
prion
Design/Logic Flaw
2022-04-01 00:15:00
nvd
nvd
CVE-2022-24803
2022-04-01 00:15:08
ubuntucve
ubuntucve
CVE-2022-24803
2022-04-01 00:00:00
github
github
Command Injection vulnerability in asciidoctor-include-ext
2022-03-31 23:27:15
cvelist
cvelist
CVE-2022-24803 Command Injection vulnerability in asciidoctor-include-ext
2022-03-31 23:30:14
cve
cve
CVE-2022-24803
2022-04-01 00:15:08