CVE-2022-21129

Versions of the package nemo-appium before 0.0.9 are vulnerable to Command Injection due to improper input sanitization in the 'module.exports.setup' function. Note: In order to exploit this vulnerability appium-running 0.1.3 has to be installed as one of nemo-appium dependencies...

CVE-2022-21129

Versions of the package nemo-appium before 0.0.9 are vulnerable to Command Injection due to improper input sanitization in the 'module.exports.setup' function. Note: In order to exploit this vulnerability appium-running 0.1.3 has to be installed as one of nemo-appium dependencies...

CVE-2022-21129

Versions of the package nemo-appium before 0.0.9 are vulnerable to Command Injection due to improper input sanitization in the 'module.exports.setup' function. Note: In order to exploit this vulnerability appium-running 0.1.3 has to be installed as one of nemo-appium dependencies...

CVE-2022-21129

The CVE-2022-21129 issue affects nemo-appium, where versions prior to 0.0.9 are vulnerable to Command Injection due to improper input sanitization in the module.exports.setup function. The vulnerability is exploitable only if appium-running 0.1.3 is installed as a dependency of nemo-appium. Impac...

PT-2023-12661 · Unknown · Appium-Running +1

Name of the Vulnerable Software and Affected Versions: nemo-appium versions prior to 0.0.9 Description: The issue arises from improper input sanitization in the module.exports.setup function, leading to Command Injection. To exploit this, appium-running 0.1.3 must be installed as one of...

nemo-appium 安全漏洞

nemo-appium is an open source plugin for PayPal. It is used to start the appium server during Nemo startup and terminate it at driver time. A security vulnerability exists in versions prior to nemo-appium 0.0.9, which stems from improper cleaning of user input...

CVE-2022-21129: Improper Neutralization of Special Elements used in an OS Command

Versions of the package nemo-appium before 0.0.9 are vulnerable to Command Injection due to improper input sanitization in the 'module.exports.setup' function. Note: In order to exploit this vulnerability appium-running 0.1.3 has to be installed as one of nemo-appium dependencies...

Command Injection

Overview Affected versions of this package are vulnerable to Command Injection due to improper input sanitization in the 'module.exports.setup' function. Note: In order to exploit this vulnerability appium-running 0.1.3 has to be installed as one of nemo-appium dependencies. PoC javascript const ...

Arbitrary file deletion in NeMo ASR webapp

Description NVIDIA NeMo contains a vulnerability in ASR WebApp, where Relative Path Traversal CWE-23 may lead to deletion of any directory through the "../" structure when admin privileges are available. CVSS Score = 2.0...

GHSA-RPX7-33J2-XX9X Arbitrary file deletion in NeMo ASR webapp

Description NVIDIA NeMo contains a vulnerability in ASR WebApp, where Relative Path Traversal CWE-23 may lead to deletion of any directory through the "../" structure when admin privileges are available. CVSS Score = 2.0...

Path Traversal in nemo-toolkit

NVIDIA NeMo before 1.6.0 contains a vulnerability in ASR WebApp, in which ../ Path Traversal may lead to deletion of any directory when admin privileges are available...

GHSA-9HG3-HMMF-C3GR Path Traversal in nemo-toolkit

NVIDIA NeMo before 1.6.0 contains a vulnerability in ASR WebApp, in which ../ Path Traversal may lead to deletion of any directory when admin privileges are available...

CVE-2022-22821

NVIDIA NeMo before 1.6.0 contains a vulnerability in ASR WebApp, in which ../ Path Traversal may lead to deletion of any directory when admin privileges are available...

Path traversal

NVIDIA NeMo before 1.6.0 contains a vulnerability in ASR WebApp, in which ../ Path Traversal may lead to deletion of any directory when admin privileges are available...

NVIDIA NeMo 路径遍历漏洞

Nvidia NeMo is a toolkit for building new state-of-the-art conversational Ai models from Nvidia, USA. A security vulnerability exists in versions of NVIDIA NeMo prior to 1.6.0 that could result in the deletion of any directory when administrator privileges are available...

CVE-2022-22821

NVIDIA NeMo before 1.6.0 contains a vulnerability in ASR WebApp, in which ../ Path Traversal may lead to deletion of any directory when admin privileges are available...

CVE-2022-22821

CVE-2022-22821 affects NVIDIA NeMo before 1.6.0, specifically the ASR WebApp component, where a Relative Path Traversal (../) could lead to deletion of arbitrary directories when an admin user is executing the web app. The vulnerability is triggered by insufficient input validation in the ASR Web...

CVE-2022-22821

NVIDIA NeMo before 1.6.0 contains a vulnerability in ASR WebApp, in which ../ Path Traversal may lead to deletion of any directory when admin privileges are available...

CVE-2022-22821

NVIDIA NeMo before 1.6.0 contains a vulnerability in ASR WebApp, in which ../ Path Traversal may lead to deletion of any directory when admin privileges are available...

CVE-2022-22821: Improper Limitation of a Pathname to a Restricted Directory

NVIDIA NeMo before 1.6.0 contains a vulnerability in ASR WebApp, in which ../ Path Traversal may lead to deletion of any directory when admin privileges are available...