Lucene search
Veracode Vulnerability DatabaseVERACODE:38486HistoryDec 15, 2022 - 2:58 a.m.
Command Injection
2022-12-1502:58:13
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
6
command injection
vulnerability
arbitrary commands
file.ts
user input
software
EPSS
0.002
Percentile
53.7%
cycle-import-check is vulnerable to command injection. The vulnerability exists due to the writeFileToTmpDirAndOpenIt function in file.ts improperly sanitizating user-input which allows an attacker to inject and execute arbitrary commands.
Related
osv
osv
CVE-2022-24377
2022-12-14 05:15:11
cycle-import-check vulnerable to Command Injection
2022-12-14 06:30:16
prion
prion
Command injection
2022-12-14 05:15:00
cvelist
cvelist
CVE-2022-24377 Command Injection
2022-12-15 03:44:03
cve
cve
CVE-2022-24377
2022-12-15 03:44:03
nvd
nvd
CVE-2022-24377
2022-12-14 05:15:11
github
github
cycle-import-check vulnerable to Command Injection
2022-12-14 06:30:16