GHSA-mhfv-8rc9-w38c
Suggest an improvement- Source
- https://github.com/advisories/GHSA-mhfv-8rc9-w38c
- Import Source
- https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/03/GHSA-mhfv-8rc9-w38c/GHSA-mhfv-8rc9-w38c.json
- JSON Data
- https://api.osv.dev/v1/vulns/GHSA-mhfv-8rc9-w38c
- Published
- 2022-03-26T00:06:00Z
- Modified
- 2024-12-05T05:39:47.186469Z
- Summary
- Arbitrary shell execution
- Details
-
Uses of shell_exec() and exec() were not escaping filenames and configuration settings in most cases
- Database specific
{ "github_reviewed": true, "cwe_ids": [], "github_reviewed_at": "2022-03-26T00:06:00Z", "nvd_published_at": null, "severity": "HIGH" }- References
Affected packages
Packagist / squizlabs/php_codesniffer
Package
- Name
- squizlabs/php_codesniffer
- Purl
- pkg:composer/squizlabs/php_codesniffer