PT-2020-19720

Name of the Vulnerable Software and Affected Versions mock2easy versions prior to 0.0.25 Description The issue allows a malicious user to inject commands through the data variable. This is possible in the affected area of the code, specifically where the require'../server/getJsonByCurl' function ...