CyberRota Analysis
This is a critical severity vulnerability with a CVSS score of 9.8. It affects Docker. It may be remotely exploitable.
CVE
CVE-2020-7606
Severity
CRITICAL
CVSS
9.8
EPSS
2.71%
Docker
Original NVD Description
docker-compose-remote-api through 0.1.4 allows execution of arbitrary commands. Within 'index.js' of the package, the function 'exec(serviceName, cmd, fnStdout, fnStderr, fnExit)' uses the variable 'serviceName' which can be controlled by users without any sanitization.