Описание
Vulnerability in dump function leads to arbitrary code execution via filePath parameters
aaptjs is a node wraper for aapt. An issue was discovered in the dump function in shenzhim aaptjs 1.3.1, allows attackers to execute arbitrary code via the filePath parameters.
Пакеты
Наименование
aaptjs
npm
Затронутые версииВерсия исправления
<= 1.3.1
Отсутствует
Связанные уязвимости
CVSS3: 9.8
nvd
больше 4 лет назад
An issue was discovered in the dump function in shenzhim aaptjs 1.3.1, allows attackers to execute arbitrary code via the filePath parameters.