PT-2020-21025 · Addax · Addax
Published
2020-09-03
·
Updated
2020-09-03
None
No severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.
Name of the Vulnerable Software and Affected Versions
addax versions prior to 1.1.0
Description
The issue concerns a Command Injection problem. It arises because the package does not validate user input on the
presignPath function, which receives input directly from an API endpoint. To exploit this issue, authentication is required. This could potentially allow attackers to execute arbitrary commands on the system.Recommendations
For versions prior to 1.1.0, upgrade to version 1.1.0 or later.
Command Injection
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Addax