Description
OS command injection vulnerability in Turistforeningen node-s3-uploader through 2.0.3 for Node.js allows attackers to execute arbitrary commands via the metadata() function.
Remediation
References
https://advisory.checkmarx.net/advisory/CX-2021-4776
Related Vulnerabilities
CVE-2020-12827 Vulnerability in maven package org.webjars.npm:mjml
CVE-2022-23461 Vulnerability in maven package org.webjars.npm:jodit
CVE-2022-36896 Vulnerability in maven package com.compuware.jenkins:compuware-scm-downloader
CVE-2016-10735 Vulnerability in maven package ru.taskurotta:bootstrap
CVE-2022-31160 Vulnerability in maven package org.webjars.bower:jquery-ui