What is GHSA-rj88-4777-828h?

GHSA-rj88-4777-828h is a security advisory published by GitHub Security Advisories with High severity. Command injection in docker-tester

Which CVE IDs does GHSA-rj88-4777-828h cover?

GHSA-rj88-4777-828h covers the following CVE IDs: CVE-2021-34079. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

Which products are affected by GHSA-rj88-4777-828h?

GHSA-rj88-4777-828h affects 1 product, including: npm/docker-tester:\u003c= 1.2.1.

GHSA-rj88-4777-828hHigh

Command injection in docker-tester

Vendor

GitHub Security Advisories

Published

June 3, 2022

Last Modified

January 28, 2023

🔗 CVE IDs covered (1)

CVE-2021-34079 →

📋 Description

OS Command injection vulnerability in Mintzo Docker-Tester through 1.2.1 allows attackers to execute arbitrary commands via shell metacharacters in the 'ports' entry of a crafted docker-compose.yml file.

🎯 Affected products1

npm/docker-tester:<= 1.2.1

🔗 References (4)

https://nvd.nist.gov/vuln/detail/CVE-2021-34079
https://advisory.checkmarx.net/advisory/CX-2021-4786
https://www.npmjs.com/package/docker-tester
https://github.com/advisories/GHSA-rj88-4777-828h