turistforeningen/node-s3-uploader · Security
OS Command Injection in s3-uploader
- GHSA ID
- GHSA-gwp3-f7mr-qpfv
- CVE ID
- CVE-2021-34084
- Severity
- high
- Published
- Updated
Description
OS command injection vulnerability in Turistforeningen node-s3-uploader through 2.0.3 for Node.js allows attackers to execute arbitrary commands via the metadata() function.
CWEs
- CWE-78 · Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')