Command Injection

Overview heroku-addonpool is a tool that Managing Addon Pool of an App in Heroku. Affected versions of this package are vulnerable to Command Injection. The second parameter of the exported function HerokuAddonPoolid, app, opt can be controlled by users without any sanitization. PoC var Root =...