GitHub Advisoryadvisory · npm

GHSA-rj88-4777-828h Command injection in docker-tester

HIGH Published 2022-06-03 Modified 2022-06-03 Official page ↗
Aliases
CVE-2021-34079
Ecosystem
npm
Packages
docker-tester
Severity
High
Weaknesses
CWE-74
Reviewed
2022-06-03

Affected packages

• npm docker-tester: <= 1.2.1 (no fix yet)

Description

OS Command injection vulnerability in Mintzo Docker-Tester through 1.2.1 allows attackers to execute arbitrary commands via shell metacharacters in the 'ports' entry of a crafted docker-compose.yml file.

Related

Alias · CVE (1)

  • CVE-2021-34079 OS Command injection vulnerability in Mintzo Docker-Tester through 1.2.1 allows attackers to execute arbitrary commands via shell… vulnerability

Weakness · CWE (1)

  • CWE-74 Improper Neutralization of Special Elements in Output Used by a Downstream Component weakness

References