Authentication flaw

2020-02-2418:15:00

PRIOn knowledge base

www.prio-n.com

9.5 High

AI Score

Confidence

High

0.01 Low

EPSS

Percentile

83.4%

JSON

rpi through 0.0.3 allows execution of arbritary commands. The variable pinNumbver in function GPIO within src/lib/gpio.js is used as part of the arguement of exec function without any sanitization.

CPENameOperatorVersion
rpile0.0.3

CPE	Name	Operator	Version
	rpi	le	0.0.3

References

github.com/xseignard/rpi/blob/master/src/lib/gpio.js

snyk.io/vuln/SNYK-JS-RPI-548942