es128/serial-number

es128/serial-number

Releases8
Frequency6 months 1 week
Last Release
Stars40
:id: Reads the machine's serial number (a.k.a. service/asset tag) or Amazon EC2 instance-id

CVE History

CVEPublishedCVSS v3CVSS v2
9.8 CRITICAL7.5 HIGH

serial-number through 1.3.0 allows execution of arbritary commands. The "cmdPrefix" argument in serialNumber function is used by the "exec" function without any validation.