Description
network-manager through 1.0.2 allows remote attackers to execute arbitrary commands via the "execSync()" argument.
Remediation
References
https://snyk.io/vuln/SNYK-JS-NETWORKMANAGER-544035
Related Vulnerabilities
CVE-2019-10770 Vulnerability in maven package io.ratpack:ratpack-core
CVE-2021-28163 Vulnerability in maven package org.eclipse.jetty:jetty-deploy
CVE-2020-26938 Vulnerability in npm package oauth2-server
CVE-2022-35949 Vulnerability in npm package undici
CVE-2022-29770 Vulnerability in maven package com.xuxueli:xxl-job