← CVE Intelligence

CVE-2019-10778

n/a / devcert-sanscache PUBLISHED

Description (CNA)

devcert-sanscache before 0.4.7 allows remote attackers to execute arbitrary code or cause a Command Injection via the exec function. The variable `commonName` controlled by user input is used as part of the `exec` function without any sanitization.

Affected (CNA)

Vendor / productVersions
n/a / devcert-sanscacheaffected All versions prior to version 0.4.7

CWE

No CWE identifiers supplied.

References

ADP enrichment

CVE

No English description supplied.