CVE-2021-34079

OS Command injection vulnerability in Mintzo Docker-Tester through 1.2.1 allows attackers to execute arbitrary commands via shell metacharacters in the 'ports' entry of a crafted docker-compose.yml file.

Score

CVSS 3.1 9.8 Critical

Status

Modified - cve@mitre.org

Published

2022-06-02

Last modified

2024-08-04

Weaknesses

CWE-78

Affected products

• Docker-tester (Docker-tester Project)

References

• https://advisory.checkmarx.net/advisory/CX-2021-4786
• https://www.npmjs.com/package/docker-tester