critical9.8
CVE-2019-10801
enpeem through 2.2.0 allows execution of arbitrary commands.
Impact
enpeem through 2.2.0 allows execution of arbitrary commands. The "options.dir" argument is provided to the "exec" function without any sanitization.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Enpeem Project | Enpeem | through 2.2.0 |