7.4
High
CVE-2022-21129 Versions of the package nemo-appium before 0.0.9 are vulnerable to Command Injection due to improper input…
Description
Versions of the package nemo-appium before 0.0.9 are vulnerable to Command Injection due to improper input sanitization in the 'module.exports.setup' function. **Note:** In order to exploit this vulnerability appium-running 0.1.3 has to be installed as one of nemo-appium dependencies.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| nemo-appium 0.0 | earliest → < 0.0.9 | 0.0.9 |