Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:37193
HistorySep 20, 2022 - 11:43 a.m.

Remote Code Execution (RCE)

2022-09-2011:43:13
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
7
remote code execution
package upload
malicious injection

EPSS

0.002

Percentile

59.8%

d8s-domains is vulnerable to remote code execution. The vulnerability exists because the library does not properly handle the package upload mechanism, allowing an attacker to inject and execute malicious packages

EPSS

0.002

Percentile

59.8%

Related for VERACODE:37193