CyberRota Analysis
AI-GeneratedA command injection vulnerability exists in the createProject function of the Projects Endpoint in MauricioMilano coder-api versions up to 1.1.0, allowing local attackers to execute arbitrary commands. This could lead to unauthorized access or manipulation of the system. Organizations using this API should prioritize patching or mitigating this vulnerability to protect their environments.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A security vulnerability has been detected in MauricioMilano coder-api up to 1.1.0. Affected is the function createProject of the file src/core/projects.ts of the component Projects Endpoint. The manipulation leads to command injection. The attack must be carried out locally. The project was informed of the problem early through an issue report but has not responded yet.