Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:36845
HistoryAug 30, 2022 - 6:38 a.m.

Remote Code Execution

2022-08-3006:38:41
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
12
font converter
remote code execution
input sanitization
vulnerability
malicious code

0.006 Low

EPSS

Percentile

78.1%

font-converter is vulnerable to remote code execution. The vulnerability exists due to the missing sanitizations of user input passed to the exec function, which allows remote attackers to inject and execute malicious code.

CPENameOperatorVersion
font-converterle1.1.1
font-converterle1.1.1

0.006 Low

EPSS

Percentile

78.1%

Related for VERACODE:36845