Skip to content
OpenAdvisories
Critical · 9.8 CVE-2020-7621 EUVD-2022-0820GHSA-4v9w-pvwr-38h3SNYK-JS-STRONGNGINXCONTROLLER-564248

OS Command Injection in strong-nginx-controller

Published Apr 2, 2020 · Updated Aug 4, 2024 · Assigned by snyk

Description

strong-nginx-controller through 1.0.2 is vulnerable to Command Injection. It allows execution of arbitrary command as part of the '_nginxCmd()' function.

Affected products

VendorProductAffectedFixed
— strong-nginx-controller All versions including 1.0.2 —

Affected packages

EcosystemPackageAffectedFixedRecord
npm strong-nginx-controller <= 1.0.2 — GHSA-4v9w-pvwr-38h3

References