Описание
Code Injection in node-rules
node-rules including 3.0.0 and prior to 5.0.0 allows injection of arbitrary commands. The argument rules of function "fromJSON()" can be controlled by users without any sanitization.
Пакеты
Наименование
node-rules
npm
Затронутые версииВерсия исправления
>= 3.0.0, < 5.0.0
5.0.0
Связанные уязвимости
CVSS3: 9.8
nvd
почти 6 лет назад
node-rules including 3.0.0 and prior to 5.0.0 allows injection of arbitrary commands. The argument rules of function "fromJSON()" can be controlled by users without any sanitization.