Description
Lack of output sanitization allowed an attack to execute arbitrary shell commands via the logkitty npm package before version 0.7.1.
Remediation
References
https://hackerone.com/reports/825729
Related Vulnerabilities
CVE-2022-24614 Vulnerability in maven package com.drewnoakes:metadata-extractor
CVE-2022-24881 Vulnerability in maven package com.hccake:ballcat-codegen
CVE-2020-35460 Vulnerability in maven package net.sf.mpxj:mpxj
CVE-2022-39299 Vulnerability in npm package @node-saml/node-saml
CVE-2023-48088 Vulnerability in maven package com.xuxueli:xxl-job-admin