CVE-2020-28430 – All versions of package nuance-gulp-build-common are vulnerable to Command Injection via t …

Vuln ID: CVE-2020-28430

Published:  2021-02-23  16:15:12Z

Description: All versions of package nuance-gulp-build-common are vulnerable to Command Injection via the index.js file. PoC: /var a = require("nuance-gulp-build-common") a.run("touch JHU")

Source: NVD.NIST.GOV

 

Date:

Categorie(s):

Tag(s):