Lucene search
Veracode Vulnerability DatabaseVERACODE:38373HistoryDec 08, 2022 - 6:24 a.m.
OS Command Injection
2022-12-0806:24:12
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
11
os command injection
nadesiko3
index.mjs
appkey validation
arbitrary commands
0.004 Low
EPSS
Percentile
73.4%
nadesiko3 is vulnerable to os command injection. The vulnerability exists in multiple functions in index.mjs because appkey is not properly validated which allows an attacker to inject and execute arbitrary commands into the system via the file parameter.
References
Related
github
github
nadesiko3 vulnerable to OS Command Injection
2022-12-05 06:30:22
osv
osv
CVE-2022-42496
2022-12-05 04:15:10
nadesiko3 vulnerable to OS Command Injection
2022-12-05 06:30:22
cve
cve
CVE-2022-42496
2022-12-05 04:15:10
cvelist
cvelist
CVE-2022-42496
2022-12-05 00:00:00
nvd
nvd
CVE-2022-42496
2022-12-05 04:15:10
prion
prion
Command injection
2022-12-05 04:15:00
jvn
jvn
JVN#56968681: Multiple vulnerabilities in nadesiko3
2022-10-20 00:00:00