1 matches found
GHSA-G4XJ-WCQ6-QWX5 Code injection in mock2easy
This affects all versions up to and including version 0.0.24 of package mock2easy. a malicious user could inject commands through the data variable: Affected Area js require'../server/getJsonByCurl'mock2easy, functionerror, stdout if error return res.json500, error; res.jsonJSON.parsestdout; , ''...
9.8CVSS5.8AI score0.02044EPSS
SaveExploits1References4
20