CVE-2018-13797

Published July 10th, 2018

View on NVD ↗

CVSS v3

N/A

CVSS v2

7.5

HIGH

Affected

PROJECT

Description

The macaddress module before 0.2.9 for Node.js is prone to an arbitrary command injection flaw, due to allowing unsanitized input to an exec (rather than execFile) call.

scravy/node-macaddress

Get the MAC addresses (hardware addresses) of the hosts network interfaces.

GitHub

144