Beveiligingsadvies
CVE-2019-10799
CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations
Beschrijving
compile-sass prior to 1.0.5 allows execution of arbritary commands. The function "setupCleanupOnExit(cssPath)" within "dist/index.js" is executed as part of the "rm" command without any sanitization.