Files
CVEs-PoC/2019/CVE-2019-10799.md
T
2025-09-29 21:09:30 +02:00

731 B

CVE-2019-10799

Description

compile-sass prior to 1.0.5 allows execution of arbritary commands. The function "setupCleanupOnExit(cssPath)" within "dist/index.js" is executed as part of the "rm" command without any sanitization.

POC

Reference

Github

No PoCs found on GitHub currently.