~ / search / GHSA-4m6q-rxhm-675w

GHSA-4m6q-rxhm-675w

OS Command Injection in adb-driver

Source: GitHub Advisory Database (reviewed) Critical CVE-2020-7636

Packages

EcosystemPackageAffectedFixed in
npm adb-driver <= 0.1.8 no fix listed

Details

As written in the advisory (Markdown source, shown as plain text).

adb-driver through 0.1.8 is vulnerable to Command Injection.It allows execution of arbitrary commands via the command function.

References

External links from the advisory. They lead to third-party sites.