Summary

In this post we will review the source code of the find-exec package to detect the command injection vulnerability as well as to see how the vulnerability was addressed in the updated version of the package. We will also see a PoC to exploit command injection in the vulnerable package versions.

Script link

CVE-2023-40582 - GitHub Advisory Database

Command Injection Vulnerability in find-exec

Description