nemo-appium is vulnerable to Command Injection. The vulnerability exists due to improper input sanitization in the module.exports.setup
function of index.js
, allowing an attacker to inject and execute malicious commands. To successfully exploit this vulnerability, appium-running
0.1.3 must be installed as one of the nemo-appium
dependencies.
CPE | Name | Operator | Version |
---|---|---|---|
nemo-appium | le | 0.0.8 | |
nemo-appium | le | 0.0.8 |