CVE-2022-21129

Publication date

2023-01-31 05:00:01

Family

snyk

State

PUBLISHED

Description

Versions of the package nemo-appium before 0.0.9 are vulnerable to Command Injection due to improper input sanitization in the module.exports.setup function. **Note:** In order to exploit this vulnerability appium-running 0.1.3 has to be installed as one of nemo-appium dependencies.