Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:35886
HistoryJun 06, 2022 - 7:14 a.m.

OS Command Injection

2022-06-0607:14:10
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
26

0.003 Low

EPSS

Percentile

71.3%

es128 ssl-utils is vulnerable to os command injection. The vulnerability exists in createCertRequest() and createCert() functions in generate.js because the user inputs are not properly sanitized which allows an attacker to inject and execute arbitrary commands.

CPENameOperatorVersion
ssl-utilsle1.0.0
ssl-utilsle1.0.0

0.003 Low

EPSS

Percentile

71.3%

Related for VERACODE:35886