Security Advisory

CVE-2016-10541

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2018-05-31 20:00:00

Last updated 2024-09-17 03:18:50

Assigner hackerone

CVSS score not scored

State PUBLISHED

Description

The npm module "shell-quote" 1.6.0 and earlier cannot correctly escape ">" and "<" operator used for redirection in shell. Applications that depend on shell-quote may also be vulnerable. A malicious user could perform code injection.

← Browse all CVEs View on cve.org ↗