cve/2020/CVE-2020-13802.md

CVE-2020-13802

Description

Rebar3 versions 3.0.0-beta.3 to 3.13.2 are vulnerable to OS command injection via URL parameter of dependency specification.

POC

Reference

• http://packetstormsecurity.com/files/159027/Rebar3-3.13.2-Command-Injection.html
• http://packetstormsecurity.com/files/159027/Rebar3-3.13.2-Command-Injection.html
• https://github.com/vulnbe/poc-rebar3.git
• https://github.com/vulnbe/poc-rebar3.git
• https://vuln.be/post/rebar3-command-injection/
• https://vuln.be/post/rebar3-command-injection/

Github

• https://github.com/404notf0und/CVE-Flow
• https://github.com/vulnbe/poc-rebar3