Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:7330
HistoryAug 20, 2018 - 9:06 a.m.

Shell Command Injection

2018-08-2009:06:27
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
6

EPSS

0.003

Percentile

71.0%

egg-scripts is vulnerable to shell command injection attacks. The attack exists because the library uses the execFile function which is not properly sanitized, allowing the attacker to inject malicious shell commands through command line argument.

EPSS

0.003

Percentile

71.0%