Remote Code Execution (RCE)

2023-04-2711:02:17

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

remote code execution

broccoli-compass

file checking

attacker-controlled filenames

malicious code

system security

EPSS

0.008

Percentile

81.5%

JSON

broccoli-compass is vulnerable to Remote Code Execution (RCE). Lack of proper checking of attacker-controlled filenames which is included in the list of files passed to the library via its files option, allows an attacker to execute malicious code on the system.