Description (CNA)
cd-messenger through 2.7.26 is vulnerable to Arbitrary Code Execution. User input provided to the `color` argument executed by the `eval` function resulting in code execution.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / cd-messenger | affected All versions including 2.7.26 |
CWE
No CWE identifiers supplied.
References
ADP enrichment
No English description supplied.