← Back

Codeception

codeception

Vendor: Codeception • 1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2021-23420
1Codeception
1Codeception
Jun 17, 2026
Aug 11, 2021
N/A· v4
9.8 CRITICAL· v3
10.0 HIGH· v2
This affects the package codeception/codeception from 4.0.0 and before 4.1.22, before 3.1.3. The RunProcess class can be leveraged as a gadget to run arbitrary commands on a system that is deserializing user input withou...Show more
This affects the package codeception/codeception from 4.0.0 and before 4.1.22, before 3.1.3. The RunProcess class can be leveraged as a gadget to run arbitrary commands on a system that is deserializing user input without validation.Show less