CVE-2020-7621

Name of the Vulnerable Software and Affected Versions strong-nginx-controller versions 1.0.2 and earlier

Description The issue allows for the execution of arbitrary commands as part of the nginxCmd() function, due to a lack of measures to neutralize special elements. This can enable a remote attacker to execute arbitrary commands.

Recommendations For strong-nginx-controller versions 1.0.2 and earlier, as a temporary workaround, consider disabling the nginxCmd() function until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.