RSS   Podatności dla 'Nuance-gulp-build-common'   RSS

2021-02-23
 
CVE-2020-28430

CWE-77
 

 
All versions of package nuance-gulp-build-common are vulnerable to Command Injection via the index.js file. PoC: /var a = require("nuance-gulp-build-common") a.run("touch JHU")

 


Copyright 2021, cxsecurity.com

 

Back to Top