Описание
stoqey/gnuplot is vulnerable to command injection
An issue found in Stoqey gnuplot v.0.0.3 and earlier allows attackers to execute arbitrary code via the src/index.ts, plotCallack, child_process, and/or filePath parameter(s).
Пакеты
Наименование
@stoqey/gnuplot
npm
Затронутые версииВерсия исправления
<= 0.0.3
Отсутствует
Связанные уязвимости
CVSS3: 9.8
nvd
почти 3 года назад
An issue found in Stoqey gnuplot v.0.0.3 and earlier allows attackers to execute arbitrary code via the src/index.ts, plotCallack, child_process, and/or filePath parameter(s).