CVE-2019-10796

Publication date

2020-02-24 17:40:06

Family

snyk

State

PUBLISHED

Description

rpi through 0.0.3 allows execution of arbritary commands. The variable pinNumbver in function GPIO within src/lib/gpio.js is used as part of the arguement of exec function without any sanitization.