1 matches found
gulp-scss-lint exec Command Injection
The vulnerability of the exec function in the src/command.js file of the gulp-scss-lint package exists because measures to eliminate special elements used in operating system commands have not been taken. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...
10CVSS8.2AI score0.0271EPSS
SaveExploits1References5Affected Software1
20