Command Injection

Overview rpi is a Node.js library to use the Raspberry Pi GPIOs. Affected versions of this package are vulnerable to Command Injection. The variable pinNumbver in function GPIO within src/lib/gpio.js is used as part of the arguement of exec function without any sanitization. PoC by JHU System...