Lucene search
Veracode Vulnerability DatabaseVERACODE:36719HistoryAug 16, 2022 - 7:09 a.m.
Command Injection
2022-08-1607:09:30
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
17
command injection
vulnerability
core.ts
software
EPSS
0.001
Percentile
19.4%
@actions/core is vulnerable to command injection. The vulnerability exists in core.exportVariable function in core.ts which allows an attacker to inject and execute arbitrary assignments to variables.
Related
hackerone
hackerone
gitlab
gitlab
github
github
@actions/core has Delimiter Injection Vulnerability in exportVariable
2022-08-18 19:01:36
cve
cve
CVE-2022-35954
2022-08-15 11:21:39
osv
osv
@actions/core has Delimiter Injection Vulnerability in exportVariable
2022-08-18 19:01:36
CVE-2022-35954
2022-08-15 11:21:39
nvd
nvd
CVE-2022-35954
2022-08-15 11:21:39
prion
prion
Design/Logic Flaw
2022-08-15 11:21:00
cvelist
cvelist