Description
apiconnect-cli-plugins through 6.0.1 is vulnerable to Command Injection.It allows execution of arbitrary commands via the pluginUri argument.
Remediation
References
https://openbase.io/js/apiconnect-cli-plugins
https://snyk.io/vuln/SNYK-JS-APICONNECTCLIPLUGINS-564427
Related Vulnerabilities
CVE-2013-4590 Vulnerability in maven package org.apache.tomcat:catalina-ant
CVE-2023-51079 Vulnerability in maven package org.mvel:mvel2
CVE-2022-1243 Vulnerability in maven package org.webjars.bower:urijs
CVE-2022-21810 Vulnerability in npm package smartctl
CVE-2021-29486 Vulnerability in npm package cumulative-distribution-function