CVE-2019-10801
OS Command Injection in enpeem
Résumé
OS Command Injection in enpeem
Description d'origine
La description telle que publiée par la source (souvent en anglais).
enpeem through 2.2.0 allows execution of arbitrary commands. The "options.dir" argument is provided to the "exec" function without any sanitization.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Paquets affectés
npm
enpeem
[{"type":"SEMVER","events":[{"introduced":"0"},{"last_affected":"2.2.0"}]}]
Références
- advisory nvd.nist.gov
- web github.com
- web snyk.io