CVE-2020-13802

Rebar3 versions 3.0.0-beta.3 to 3.13.2 are vulnerable to OS command injection via URL parameter of dependency specification.
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:erlang:rebar3:*:*:*:*:*:*:*:*
cpe:2.3:a:erlang:rebar3:3.0.0:beta3:*:*:*:*:*:*
cpe:2.3:a:erlang:rebar3:3.0.0:beta4:*:*:*:*:*:*

History

No history.

Information

Published : 2020-09-02 17:15

Updated : 2024-02-04 21:00


NVD link : CVE-2020-13802

Mitre link : CVE-2020-13802

CVE.ORG link : CVE-2020-13802


JSON object : View

Products Affected

erlang

  • rebar3
CWE
CWE-78

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')