Fixed RCE in heroku-exec-util

[d3m0n-r00t]

📊 Metadata *

Fixed RCE in heroku-exec-util

Bounty URL: https://www.huntr.dev/bounties/1-npm-heroku-exec-util

⚙️ Description *

The heroku-exec-util module is vulnerable against RCE since a command is crafted using user inputs not validated and then executed, leading to arbitrary command injection

💻 Technical Description *

Fixed RCE in heroku-exec-util using execFile in the place of exec.

🐛 Proof of Concept (PoC) *

var heu = require('heroku-exec-util');
heu.ssh({args:{}},'test; touch HACKED; #','','test',{path:'test'})

🔥 Proof of Fix (PoF) *

Fixed RCE by using execFile.

👍 User Acceptance Testing (UAT)

App seems to be working fine.

[Mik317]

LGTM 😄 🦖

Cheers,
Mik

[bbeale]

Nice fix 👍

[mufeedvh]

Great fix! 👏🎉

[huntr-helper]

Congratulations d3m0n-r00t - your fix has been selected! 🎉

Thanks for being part of the community & helping secure the world's open source code.
If you have any questions, please respond in the comments section, or hit us up on Discord. Your bounty is on its way - keep hunting!

Come join us on Discord