CVE-2022-25171
Command Injection
Summary
Command Injection
Original description
The description as published by the source.
The package p4 before 0.0.7 are vulnerable to Command Injection via the run() function due to improper input sanitization
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
References
- advisory github.com
- advisory nvd.nist.gov
- patch github.com
- web github.com
- web security.snyk.io