Command injection in docker-tester

CRÍTICO 9.8CVE-2021-34079 · GHSA-rj88-4777-828h · Published 02/06/2022 · updated 17/06/2026

Em resumo

CVE-2021-34079 é uma vulnerabilidade CRÍTICO (CVSS 9.8) que afeta docker-tester (docker-tester project), docker-tester.
Chance de exploração nos próximos 30 dias (EPSS): 4.1%, maior que 90.9% das vulnerabilidades.
Ainda não há versão corrigida: acompanhe o aviso do fornecedor em Referências.

Package	Affected versions	Patched versions
docker-tester docker-tester_project	`≤ 1.2.1`	No fix yet
docker-tester npm	`≤ 1.2.1`	No fix yet

Description

OS Command injection vulnerability in Mintzo Docker-Tester through 1.2.1 allows attackers to execute arbitrary commands via shell metacharacters in the 'ports' entry of a crafted docker-compose.yml file.

NVD description

References

nvd.nist.gov/vuln/detail/CVE-2021-34079 · ADVISORY
advisory.checkmarx.net/advisory/CX-2021-4786 · WEB
mintzo/docker-testing · PACKAGE
npmjs.com/package/docker-tester · WEB

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free