Описание
SketchSVG Arbitrary Code Injection vulnerability
All versions of the package sketchsvg are vulnerable to Arbitrary Code Injection when invoking shell.exec without sanitization nor parametrization while concatenating the current directory as part of the command string.
Ссылки
Пакеты
Наименование
sketchsvg
npm
Затронутые версииВерсия исправления
<= 0.0.1
Отсутствует
Связанные уязвимости
CVSS3: 6.9
nvd
почти 3 года назад
All versions of the package sketchsvg are vulnerable to Arbitrary Code Injection when invoking shell.exec without sanitization nor parametrization while concatenating the current directory as part of the command string.