Description (CNA)
pomelo-monitor through 0.3.7 is vulnerable to Command Injection.It allows injection of arbitrary commands as part of 'pomelo-monitor' params.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / pomelo-monitor | affected All versions including 0.3.7 |
CWE
No CWE identifiers supplied.
References
- https://github.com/halfblood369/monitor/blob/900b5cadf59edcccac4754e5706a22719925ddb9/lib/processMonitor.js%2C
- https://snyk.io/vuln/SNYK-JS-POMELOMONITOR-173695
ADP enrichment
No English description supplied.