Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
clamscan through 1.2.0 is vulnerable to Command Injection. It is possible to inject arbitrary commands as part of the `_is_clamav_binary` function located within `Index.js`. It should be noted that this vulnerability requires a pre-requisite that a folder should be created with the same command that will be chained to execute. This lowers the risk of this issue.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
clamscan 注入漏洞
Vulnerability Description
clamscan是一款命令行工具，它主要用于扫描文件或目录中是否包含病毒。 clamscan 1.2.0及之前版本中的Index.js文件的‘_is_clamav_binary()’函数存在注入漏洞。攻击者可通过发送特制请求利用该漏洞执行任意命令。
CVSS Information
N/A
Vulnerability Type
N/A