Command injection in docker-tester

CRITICO 9.8CVE-2021-34079 · GHSA-rj88-4777-828h · Published 02/06/2022 · updated 17/06/2026

In breve

CVE-2021-34079 è una vulnerabilità CRITICO (CVSS 9.8) che riguarda docker-tester (docker-tester project), docker-tester.
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 4.1%, superiore al 90.9% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
docker-tester docker-tester_project	`≤ 1.2.1`	No fix yet
docker-tester npm	`≤ 1.2.1`	No fix yet

Description

OS Command injection vulnerability in Mintzo Docker-Tester through 1.2.1 allows attackers to execute arbitrary commands via shell metacharacters in the 'ports' entry of a crafted docker-compose.yml file.

NVD description

References

nvd.nist.gov/vuln/detail/CVE-2021-34079 · ADVISORY
advisory.checkmarx.net/advisory/CX-2021-4786 · WEB
mintzo/docker-testing · PACKAGE
npmjs.com/package/docker-tester · WEB

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free