OS Command Injection in strong-nginx-controller

GHSA-4v9w-pvwr-38h3 · CVE-2020-7621 · SNYK-JS-STRONGNGINXCONTROLLER-564248

Published Feb 10, 2022 · Modified Jul 8, 2026

Description

strong-nginx-controller through 1.0.2 is vulnerable to Command Injection. It allows execution of arbitrary command as part of the '_nginxCmd()' function.

References

ADVISORY https://nvd.nist.gov/vuln/detail/CVE-2020-7621
WEB https://github.com/strongloop/strong-nginx-controller/blob/master/lib/server.js#L65
WEB https://snyk.io/vuln/SNYK-JS-STRONGNGINXCONTROLLER-564248

Ready to move

Start Securing

Start for Free Get Demo

Free, no credit card | First findings in minutes