Description
An issue was discovered in the singleCrunch function in shenzhim aaptjs 1.3.1, allows attackers to execute arbitrary code via the filePath parameters.
Remediation
References
https://github.com/shenzhim/aaptjs/issues/2
Related Vulnerabilities
CVE-2022-4245 Vulnerability in maven package org.codehaus.plexus:plexus-utils
CVE-2020-28168 Vulnerability in maven package org.webjars.bower:axios
CVE-2022-36916 Vulnerability in maven package org.jenkins-ci.plugins:google-cloud-backup
CVE-2018-3735 Vulnerability in npm package bracket-template
CVE-2022-43405 Vulnerability in maven package io.jenkins.plugins:pipeline-groovy-lib