Description
Unsanitized input from a command line argument flows into os.system
, where it is used as a shell command. This may result in a Command Injection vulnerability.
python3 rocket_local.py _watch .; touch os_injection.txt; #
This vulnerability was fixed in version 1.2.0. Please update.
Description
Unsanitized input from a command line argument flows into
os.system
, where it is used as a shell command. This may result in a Command Injection vulnerability.python3 rocket_local.py _watch .; touch os_injection.txt; #
This vulnerability was fixed in version 1.2.0. Please update.