1 matches found
CVE-2020-7697: Improper Neutralization of Special Elements used in a Command
This affects all versions of package mock2easy. a malicious user could inject commands through the data variable: Affected Area require'../server/getJsonByCurl'mock2easy, function error, stdout if error return res.json500, error; res.jsonJSON.parsestdout; , '', data.interfaceUrl, query,...
9.8CVSS5.7AI score0.02044EPSS
SaveExploits1References2
20