Command Injection

2022-07-2605:43:59

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

0.003 Low

EPSS

Percentile

65.3%

JSON

deferred-exec is vulnerable to command injection. The vulnerability exists in deferredChildProcess function in deferred-exec.js because the command execution is not properly validated which allows an attacker to inject and execute malicious commands.

CPENameOperatorVersion
deferred-execeq0.1.0
deferred-execle0.3.1
deferred-execeq0.1.0
deferred-execle0.3.1

Name	Operator	Version
deferred-exec	eq	0.1.0
deferred-exec	le	0.3.1
deferred-exec	eq	0.1.0
deferred-exec	le	0.3.1

References

github.com/advisories/GHSA-54w4-2f2p-f48h

github.com/danheberden/deferred-exec/blob/master/lib/deferred-exec.js#L13

0.003 Low

EPSS

Percentile

65.3%

JSON

Related for VERACODE:36499