Command Injection

2023-01-1521:58:16

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

command injection

exec-local-bin

theprocess function

vulnerability

software

0.002 Low

EPSS

Percentile

55.3%

JSON

exec-local-bin is vulnerable to Command Injection attacks. The library does not properly sanitize user-input via theProcess function, which allows an attacker to inject and execute malicious commands.

CPENameOperatorVersion
exec-local-binle1.1.1
exec-local-binle1.1.1

CPE	Name	Operator	Version
	exec-local-bin	le	1.1.1
	exec-local-bin	le	1.1.1

References

github.com/advisories/GHSA-f259-h6m8-hm8m

github.com/saeedseyfi/exec-local-bin/blob/92db00bde9d6e2d83410849f898df12f075b73b0/index.js%23L9

github.com/saeedseyfi/exec-local-bin/blob/v1.1.1/index.js#L9

github.com/saeedseyfi/exec-local-bin/commit/d425866375c85038133a6f79db2aac66c0a72624

0.002 Low

EPSS

Percentile

55.3%

JSON

Related for VERACODE:38872