Description
apiconnect-cli-plugins through 6.0.1 is vulnerable to Command Injection.It allows execution of arbitrary commands via the pluginUri argument.
Remediation
References
https://openbase.io/js/apiconnect-cli-plugins
https://snyk.io/vuln/SNYK-JS-APICONNECTCLIPLUGINS-564427
Related Vulnerabilities
CVE-2021-23490 Vulnerability in npm package parse-link-header
CVE-2017-17485 Vulnerability in maven package com.fasterxml.jackson.core:jackson-databind
CVE-2019-1010266 Vulnerability in maven package org.fujion.webjars:lodash
CVE-2022-36900 Vulnerability in maven package com.compuware.jenkins:compuware-zadviser-api
CVE-2019-18798 Vulnerability in maven package org.webjars.npm:node-sass