Description
A command injection vulnerability in libnmapp package for versions <0.4.16 allows arbitrary commands to be executed via arguments to the range options.
Remediation
References
https://hackerone.com/reports/390865
Related Vulnerabilities
CVE-2022-34112 Vulnerability in maven package io.dataease:dataease-plugin-common
CVE-2022-38639 Vulnerability in npm package markdown-nice
CVE-2022-36437 Vulnerability in maven package com.hazelcast:hazelcast-enterprise
CVE-2020-28196 Vulnerability in npm package node-krb5
CVE-2021-23337 Vulnerability in maven package org.webjars.bowergithub.lodash:lodash