Beveiligingsadvies

CVE-2022-21129

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2023-01-31 05:00:01
Laatst bijgewerkt 2025-03-27 17:15:46
Toegewezen door snyk
CVSS-score 7.4
Status PUBLISHED

Beschrijving

Versions of the package nemo-appium before 0.0.9 are vulnerable to Command Injection due to improper input sanitization in the 'module.exports.setup' function. **Note:** In order to exploit this vulnerability appium-running 0.1.3 has to be installed as one of nemo-appium dependencies.