Beveiligingsadvies

CVE-2020-7606

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2020-03-15 21:31:11

Laatst bijgewerkt 2024-08-04 09:33:19

Toegewezen door snyk

CVSS-score geen score

Status PUBLISHED

Beschrijving

docker-compose-remote-api through 0.1.4 allows execution of arbitrary commands. Within 'index.js' of the package, the function 'exec(serviceName, cmd, fnStdout, fnStderr, fnExit)' uses the variable 'serviceName' which can be controlled by users without any sanitization.

← Alle CVE's bekijken Bekijk op cve.org ↗