Lucene search
+L

1 matches found

OSV
OSV
added 2021/05/06 6:25 p.m.7 views

GHSA-G4XJ-WCQ6-QWX5 Code injection in mock2easy

This affects all versions up to and including version 0.0.24 of package mock2easy. a malicious user could inject commands through the data variable: Affected Area js require'../server/getJsonByCurl'mock2easy, functionerror, stdout if error return res.json500, error; res.jsonJSON.parsestdout; , ''...

9.8CVSS5.8AI score0.02044EPSS
SaveExploits1References4
Rows per page
Query Builder