Description
Summit is a node web framework. When using the PouchDB driver in the module, Summit 0.1.0 and later allows an attacker to execute arbitrary commands via the collection name.
Remediation
References
https://github.com/notduncansmith/summit/issues/23
https://nodesecurity.io/advisories/315
Related Vulnerabilities
CVE-2017-3160 Vulnerability in npm package cordova-android
CVE-2020-14967 Vulnerability in maven package org.webjars.bower:jsrsasign
CVE-2012-5887 Vulnerability in maven package org.apache.tomcat:catalina
CVE-2017-5657 Vulnerability in maven package org.apache.archiva:archiva
CVE-2016-0779 Vulnerability in maven package org.apache.tomee:arquillian-tomee-embedded