critical9.8
CVE-2020-7633
apiconnect-cli-plugins vulnerable to OS Command Injection
Impact
apiconnect-cli-plugins through 6.0.1 is vulnerable to Command Injection. It allows execution of arbitrary commands via the `pluginUri` argument. ### PoC ```js var root = require("apiconnect-cli-plugins"); var payload = "& touch Song &"; root.pluginLoader.installPlugin(payload, ""); ``` The injection point is located in line 181 of file `lib/plugin-loader.js`, in the function `installPlugin(pluginUri, registryUri)`.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| npm | apiconnect-cli-plugins | <= 6.0.1 | none recorded |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Apiconnect-Cli-Plugins Project | Apiconnect-Cli-Plugins | through 6.0.1 |
Weakness classification
References
- NVD record
- CVE.org record
- GitHub advisory
- https://openbase.io/js/apiconnect-cli-plugins
- https://snyk.io/vuln/SNYK-JS-APICONNECTCLIPLUGINS-564427
- https://github.com/advisories/GHSA-c9m9-48pw-6mpv
- https://nvd.nist.gov/vuln/detail/CVE-2020-7633
- https://web.archive.org/web/20211209115530/https://openbase.com/js/apiconnect-cli-plugins