CX Command_Argument_Injection @ vulnerable/system.go [master]

[github-actions[bot]]

Command_Argument_Injection issue exists @ vulnerable/system.go in branch master

An argument is passed to an external OS command by CombinedOutput at vulnerable\system.go in line 9. This could allow an attacker to attack the external program by injecting malicious arguments into its execution.The argument is provided by user input at ctx at vulnerable\system.go in line 8.Similarity ID: -960292164

Severity: Low

CWE:88

Vulnerability details and guidance

Internal Guidance

Checkmarx

Training Recommended Fix

Lines: 8

---

Code (Line #8):

func System(ctx context.Context, cmd string) ([]byte, error) {

---

[github-actions[bot]]

Issue still exists.