totaljs/code

totaljs/code

Releases2
Frequency9 months 1 week
Last Release
Stars27
Online collaboration app for everyone.

CVE History

CVEPublishedCVSS v3CVSS v2
8.8 HIGH

In Total.js 4 before 0e5ace7, /api/common/ping can achieve remote command execution via shell metacharacters in the host parameter.