CodeceptionCVEs & Vulnerabilities

1 CVEs affecting Codeception products, tracked from the National Vulnerability Database, with CVSS/EPSS scores and exploitation status.

1 CVEs→ All vendors

Most Affected Products

codeception 1

CVE-2021-23420CRITICAL

This affects the package codeception/codeception from 4.0.0 and before 4.1.22, before 3.1.3. The RunProcess class can be leveraged as a gadget to run arbitrary commands on a system that is deserializing user input without validation.

11 Aug 2021

9.8

CVSS

← PrevPage 1 / 1Next →

← All Vendors·CVE Database