In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.
Test your applicationsLearn about Arbitrary Code Injection vulnerabilities in an interactive lesson.
Start learningUpgrade addax
to version 1.1.0 or higher.
addax is a HTTP proxy to serve private S3 files to authenticated clients.
Affected versions of this package are vulnerable to Arbitrary Code Injection. User input on the presignPath
function, which receives input directly from the API endpoint, is not validated, which allows code injection. Note: Exploitation of this vulnerability requires authentication.