Description
apiconnect-cli-plugins through 6.0.1 is vulnerable to Command Injection.It allows execution of arbitrary commands via the pluginUri argument.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | apiconnect-cli-plugins | All versions including 6.0.1 | — |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| npm | apiconnect-cli-plugins | <= 6.0.1 | — | GHSA-c9m9-48pw-6mpv |