RSS   Podatności dla 'Geojson2kml'   RSS

2021-02-23
 
CVE-2020-28429

CWE-77
 

 
All versions of package geojson2kml are vulnerable to Command Injection via the index.js file. PoC: var a =require("geojson2kml"); a("./","& touch JHU",function(){})

 


Copyright 2024, cxsecurity.com

 

Back to Top