Files
CVEs-PoC/2020/CVE-2020-7609.md
T
2024-06-18 02:51:15 +02:00

667 B

CVE-2020-7609

Description

node-rules including 3.0.0 and prior to 5.0.0 allows injection of arbitrary commands. The argument rules of function "fromJSON()" can be controlled by users without any sanitization.

POC

Reference

Github

No PoCs found on GitHub currently.