CVE-2017-16042
CVE-2017-16042
Growl adds growl notification support to nodejs. Growl before 1.10.2 does not properly sanitize input before passing it to exec, allowing for arbitrary command execution.
Affected products
HackerOne · growl node moduleWant to know if your infrastructure is exposed to this?
Talk to TrueHacking →