CVE-2017-16042 PUBLISHED

Growl adds growl notification support to nodejs. Growl before 1.10.2 does not properly sanitize input before passing it to exec, allowing for arbitrary command execution.

EPSS 0.35% · 57.2th percentile

Risk Scores

EPSS Score
0.35%
57.2th percentile

Affected Products

VendorProductVersions
Ubuntu:18.04:LTSnode-growl0, 1.7.0-1
Ubuntu:16.04:LTSnode-growl0, 1.7.0-1

Timeline

References

Open in Interactive Console →