Command Injection

2022-07-1809:04:29

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

shescape

command injection

vulnerability

unix

powershell

malicious characters

EPSS

0.003

Percentile

68.2%

JSON

shescape is vulnerable to command injection. White spaces are not escaped for the escape or escapeAll functions with the interpolation option set to true on Bash, Dash, and Zsh on Unix and Powershell on Windows systems, allowing an attacker to inject malicious characters.