Remote Code Execution (RCE)

2017-11-1708:43:20

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

0.001 Low

EPSS

Percentile

30.2%

JSON

Codiad is vulnerable to remote code execution (RCE) attacks. The admin console’s path is not sanitized properly, allowing a malicious user to access arbitrary shell code on the application.

CPENameOperatorVersion
codiad/codiadeq1.3.6

CPE	Name	Operator	Version
	codiad/codiad	eq	1.3.6

References

www.jianshu.com/p/b09d20af2374

github.com/Codiad/Codiad/issues/1017

github.com/Codiad/Codiad/pull/1019

0.001 Low

EPSS

Percentile

30.2%

JSON

Related for VERACODE:5447