Description

apiconnect-cli-plugins through 6.0.1 is vulnerable to Command Injection.It allows execution of arbitrary commands via the pluginUri argument.

Remediation

References

https://openbase.io/js/apiconnect-cli-plugins

https://snyk.io/vuln/SNYK-JS-APICONNECTCLIPLUGINS-564427

Related Vulnerabilities

CVE-2022-45143 Vulnerability in maven package org.apache.tomcat:tomcat-catalina

CVE-2023-47324 Vulnerability in maven package org.silverpeas.core:silverpeas-core-war

CVE-2018-1000174 Vulnerability in maven package org.jenkins-ci.plugins:google-login

CVE-2018-14042 Vulnerability in maven package org.webjars:bootstrap

CVE-2019-12043 Vulnerability in npm package remarkable

Severity

Critical

Classification

CWE-78 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Tags

Third Party Advisory Exploit