Description
op-browser through 1.0.9 is vulnerable to Command Injection. It allows execution of arbitrary commands via the url function.
Recommendation
No fix is available yet. Followings are affected versions:
- <= 1.0.9
References
Could your website be exposed too?
SmartScanner can check your website for Injection in op-browser and gives you actionable findings to investigate.
Start a free scanRelated Issues
- Code Injection in cd-messenger - CVE-2020-7675
- Injection and Command Injection in devcert - CVE-2020-8186
- Server-Side Template Injection in formio - CVE-2020-28246
- Code Injection in jsen - CVE-2020-7777
You might also like:
See something that needs correcting? Let us knowUpdated July 06, 2026


