CVE-2019-10777

https://notcve.org/view.php?id=CVE-2019-10777

In aws-lambda versions prior to version 1.0.5, the "config.FunctioName" is used to construct the argument used within the "exec" function without any sanitization. It is possible for a user to inject arbitrary commands to the "zipCmd" used within "config.FunctionName". En aws-lambda versiones anteriores a la versión 1.0.5, el "config.FunctioName" es usado para construir el argumento utilizado dentro de la función "exec" sin ningún saneamiento. Es posible que un usuario inyecte comandos arbitrarios en el "zipCmd" usado dentro de "config.FunctionName". • https://github.com/ossf-cve-benchmark/CVE-2019-10777 https://snyk.io/vuln/SNYK-JS-AWSLAMBDA-540839 • CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') •