Lucene search
China National Vulnerability DatabaseCNVD-2021-84830HistoryNov 01, 2021 - 12:00 a.m.
aaptjs remote code execution vulnerability (CNVD-2021-84830)
2021-11-0100:00:00
China National Vulnerability Database
www.cnvd.org.cn
4
aaptjs
version 1.3.1
remote code execution
packagecmd function
filepath parameter
vulnerability
exploit
arbitrary code
EPSS
0.004
Percentile
72.4%
aaptjs is a node wrapper for aapt. aaptjs version 1.3.1 has a remote code execution vulnerability in the packageCmd function. An attacker can exploit this vulnerability to execute arbitrary code via the filePath parameter.
Related
veracode
veracode
Remote Code Execution (RCE)
2021-11-01 04:35:49
nvd
nvd
CVE-2020-36378
2021-10-31 20:15:08
cve
cve
CVE-2020-36378
2021-10-31 20:15:08
osv
osv
cvelist
cvelist
CVE-2020-36378
2021-10-31 19:51:56
github
github
prion
prion
Code injection
2021-10-31 20:15:00