search

cxnleach / Vuln_GO_App

MIT License
0 stars 0 forks source link

CX Command_Argument_Injection @ server/router.go [master] #20

Open github-actions[bot] opened 1 month ago

github-actions[bot] commented 1 month ago

Command_Argument_Injection issue exists @ server/router.go in branch master

An argument is passed to an external OS command by CombinedOutput at vulnerable\system.go in line 9. This could allow an attacker to attack the external program by injecting malicious arguments into its execution.The argument is provided by user input at FormValue at server\router.go in line 46.Similarity ID: -2036393799

Severity: Low

CWE:88

Vulnerability details and guidance

Internal Guidance

Checkmarx

Training Recommended Fix

Lines: 46

Code (Line #46):

extra := r.FormValue("extra")
github-actions[bot] commented 1 month ago

Issue still exists.