CVE-2017-11366
1 advisory.
Packagist/codiad/codiad CVE-2017-11366: critical 9.8
Codiad Vulnerable to Shell Command Injection
Action: Upgrade codiad/codiad to 2.8.3 or later.
composer require codiad/codiad:2.8.3Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.8.3 | - |
Fixed versions
| 2.8.3 |
Sources
- osv: GHSA-jccv-3h4x-35mv
- https://nvd.nist.gov/vuln/detail/CVE-2017-11366
- https://github.com/Codiad/Codiad/issues/1011
- https://github.com/Codiad/Codiad/pull/1013
- https://github.com/Codiad/Codiad/pull/1013/commits/b3645b4c6718cef6de7003f41aafe7bfcc0395d1
- https://github.com/Codiad/Codiad/commit/ca5089eeba42d16ce3a7f86be628ac7750780111
- https://github.com/Codiad/Codiad
- http://www.jianshu.com/p/41ac7ac2a7af
CVE-2017-11366 · published · modified · JSON