60
CVE-2021-27886
—CVSS 3.1
9.8 critical
EPSS
46%p99
Published
()
Modified
Description
rakibtg Docker Dashboard before 2021-02-28 allows command injection in backend/utilities/terminal.js via shell metacharacters in the command parameter of an API request. NOTE: this is NOT a Docker, Inc. product.
- Vendors
- docker dashboard project
- Products
- docker dashboard
- Weakness
- CWE-78
- Vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H