Lucene search
Veracode Vulnerability DatabaseVERACODE:35888HistoryJun 06, 2022 - 9:34 a.m.
OS Command Injection
2022-06-0609:34:07
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
15
0.003 Low
EPSS
Percentile
71.3%
s3-uploader is vulnerable to os command injection. The vulnerability exists in the getMetadata function in index.js because the parameters are not properly restricted which allows an attacker to inject and execute arbitrary os commands.
| CPE | Name | Operator | Version |
|---|---|---|---|
| s3-uploader | le | 2.1.0-rc.1 | |
| s3-uploader | le | 2.1.0-rc.1 |
Related
cvelist
cvelist
CVE-2021-34084
2022-06-01 14:31:52
nvd
nvd
CVE-2021-34084
2022-06-02 14:15:29
cve
cve
CVE-2021-34084
2022-06-02 14:15:29
prion
prion
Command injection
2022-06-02 14:15:00
github
github
OS Command Injection in s3-uploader
2022-06-03 00:00:59
osv
osv
OS Command Injection in s3-uploader
2022-06-03 00:00:59