CVE-2020-7606 | BDVDB-2026-132421 Detail

Description#

docker-compose-remote-api through 0.1.4 allows execution of arbitrary commands. Within 'index.js' of the package, the function 'exec(serviceName, cmd, fnStdout, fnStderr, fnExit)' uses the variable 'serviceName' which can be controlled by users without any sanitization.

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12020-03-15Record published in the CVE List.
2. Version 22024-08-04Most recent update recorded in the CVE List.