Not rated
CVE-2019-10804 serial-number through 1.3.0 allows execution of arbritary commands
Description
serial-number through 1.3.0 allows execution of arbritary commands. The "cmdPrefix" argument in serialNumber function is used by the "exec" function without any validation.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| serial-number | Versions not published |