Lucene search
Veracode Vulnerability DatabaseVERACODE:47082HistoryMay 21, 2024 - 7:04 a.m.
Command Injection
2024-05-2107:04:56
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
1
command injection
consoleme
improper neutralization
arbitrary commands
9.3 High
CVSS4
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/SC:H/VI:H/SI:H/VA:N/SA:N
7.6 High
AI Score
Confidence
High
0.0004 Low
EPSS
Percentile
9.1%
consoleme is vulnerable to Command Injection. The vulnerability is due to improper neutralization of special elements used in a command, potentially allowing an attacker to inject and execute arbitrary commands via an argument flag.
| CPE | Name | Operator | Version |
|---|---|---|---|
| consoleme | le | 1.3.2.dev1 | |
| consoleme | le | 1.3.2.dev1 |
Related
cve
cve
CVE-2024-5023
2024-05-16 18:15:10
cvelist
cvelist
osv
osv
ConsoleMe has an Arbitrary File Read Vulnerability via Limited Git command
2024-05-16 21:02:36
nvd
nvd
CVE-2024-5023
2024-05-16 18:15:10
vulnrichment
vulnrichment
github
github
ConsoleMe has an Arbitrary File Read Vulnerability via Limited Git command
2024-05-16 21:02:36
9.3 High
CVSS4
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/SC:H/VI:H/SI:H/VA:N/SA:N
7.6 High
AI Score
Confidence
High
0.0004 Low
EPSS
Percentile
9.1%
Related for VERACODE:47082