GHSA-m6rw-m2v9-7hx4
OS Command Injection in wifiscanner
Packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| npm | wifiscanner | <= 1.0.1 | no fix listed |
Details
As written in the advisory (Markdown source, shown as plain text).
wifiscanner.js in thingsSDK WiFi Scanner 1.0.1 allows Code Injection because it can be used with options to overwrite the default executable/binary path and its arguments. An attacker can abuse this functionality to execute arbitrary code.
References
External links from the advisory. They lead to third-party sites.