GHSA-wqhw-frpx-5mmp Command Injection in tomato
Attackers can execute arbitrary system commands via the /api/exec endpoint due to lack of input validation in the tomato library.
- Exploited in the wild
- Not known
- Login needed
- Not stated
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is GHSA-wqhw-frpx-5mmp?
GHSA-wqhw-frpx-5mmp is a command injection vulnerability in tomato, published on 2 Sep 2020. It can be exploited over the network, with no action from the victim.
Official description
All versions of tomato are vulnerable to Command Injection. The /api/exec endpoint does not validate user input allowing attackers to run arbitrary commands in the system.
Recommendation
No fix is currently available. Consider using an alternative module until a fix is made available.
Which versions are affected by GHSA-wqhw-frpx-5mmp?
2 open source packages ship an affected version, including tomato.
| Package | Affected | Fixed in |
|---|---|---|
tomato npm | All versions | None |
tomato npm | All versions | None |
How do I fix GHSA-wqhw-frpx-5mmp?
No fix has been published for GHSA-wqhw-frpx-5mmp yet. Limit exposure of the affected software until one is available.
Upgrade, and pass arguments to programs as a list instead of through a shell. More about Command injection.
Is GHSA-wqhw-frpx-5mmp being exploited?
There is no known exploitation of GHSA-wqhw-frpx-5mmp in the wild and no public exploit code.