Lucene search

K
nodejsCristian-Alexandru StaicuNODEJS:146
HistorySep 06, 2016 - 12:49 p.m.

Command Injection

2016-09-0612:49:40
Cristian-Alexandru Staicu
www.npmjs.com
57

0.005 Low

EPSS

Percentile

77.1%

Overview

Affected versions of growl do not properly sanitize input prior to passing it into a shell command, allowing for arbitrary command execution.

Recommendation

Update to version 1.10.2 or later.

References

CPENameOperatorVersion
growllt1.10.2