Unrated
wifiscanner.js in thingsSDK WiFi Scanner 1.0.1 allows Code Injection because it can be used with options to overwrite the default executable/binary pa...
CVE-2020-15362
First seen on SecPulse
Original description The description as published by the source.
wifiscanner.js in thingsSDK WiFi Scanner 1.0.1 allows Code Injection because it can be used with options to overwrite the default executable/binary path and its arguments. An attacker can abuse this functionality to execute arbitrary code.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
References
- report github.com