1 matches found
Remote Code Execution (RCE)
karma-mojo is vulnerable to remote code execution RCE. The attack exists because the argument config in the function grep can be manipulated by attacker using malicious code as it was not sanitized before execution...