CVE-2020-15362

CVE-2020-15362 affects thingsSDK WiFi Scanner 1.0.1. The wifiscanner.js component allows Code Injection by accepting options that overwrite the default executable/binary path and its arguments, enabling arbitrary code execution. Root cause: insecure handling/override of executable path and argume...