CVE-2023-26107

6.9MEDIUM

All versions of the package sketchsvg are vulnerable to Arbitrary Code Injection when invoking shell.exec without sanitization nor parametrization while concatenating the current directory as part of

发布于: 3/6/2023更新于: 3/5/2025
在NVD查看在MITRE查看

描述

All versions of the package sketchsvg are vulnerable to Arbitrary Code Injection when invoking shell.exec without sanitization nor parametrization while concatenating the current directory as part of the command string.

AI分析AI驱动

受影响产品

ebaysketchsvg
-

参考资料