PT-2020-21025
Published
2020-09-03
·
Updated
2020-09-03
Description by
Score
N/A
Not availableNo severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.
Name of the Vulnerable Software and Affected Versions
addax versions prior to 1.1.0
Description
The issue concerns a Command Injection problem. It arises because the package does not validate user input on the
presignPath function, which receives input directly from an API endpoint. To exploit this issue, authentication is required. This could potentially allow attackers to execute arbitrary commands on the system.Recommendations
For versions prior to 1.1.0, upgrade to version 1.1.0 or later.
Found an issue in the description? Have something to add? Feel free to write us 👾