mintzo/docker-testing · Security
Command injection in docker-tester
- GHSA ID
- GHSA-rj88-4777-828h
- CVE ID
- CVE-2021-34079
- Severity
- high
- Published
- Updated
Description
OS Command injection vulnerability in Mintzo Docker-Tester through 1.2.1 allows attackers to execute arbitrary commands via shell metacharacters in the 'ports' entry of a crafted docker-compose.yml file.
CWEs
- CWE-74 · Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')