Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:37298
HistorySep 27, 2022 - 9:06 a.m.

Command Injection

2022-09-2709:06:02
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
10
nuprocess
command injection
vulnerability
nuprocessbuilder

0.004 Low

EPSS

Percentile

73.0%

Nuprocess is vulnerable to command injection. The vulnerability exists because NuProcess is missing a check in run and start functions of NuProcessBuilder.java which enables the attackers to use NULL characters in their strings to perform a command line injection.

0.004 Low

EPSS

Percentile

73.0%