Description
An issue was discovered in the list function in shenzhim aaptjs 1.3.1, allows attackers to execute arbitrary code via the filePath parameters.
Remediation
References
https://github.com/shenzhim/aaptjs/issues/2
Related Vulnerabilities
CVE-2014-3120 Vulnerability in maven package org.elasticsearch:elasticsearch
CVE-2022-38370 Vulnerability in maven package org.apache.iotdb:iotdb-grafana-connector
CVE-2019-10785 Vulnerability in maven package org.webjars.bowergithub.dojo:dojox
CVE-2020-26296 Vulnerability in maven package org.webjars.npm:vega
CVE-2023-29516 Vulnerability in maven package org.xwiki.platform:xwiki-platform-attachment-ui