OS Command Injection Through Shell Invocation in Node.js
Shell syntax in user input gets parsed as commands, not safely passed as data.
Omar Haddad
Contributing Editor
Omar Haddad is a contributing editor at Vulnerability Mechanics covering injection flaws. Based in London, Omar has written for Vulnerability Mechanics since 2017.
1 story · London
Shell syntax in user input gets parsed as commands, not safely passed as data.