eugeneware / eugeneware/windows-edge

Security Notice & Bug Bounty - Arbitrary Code Execution - huntr.dev

Open
#2 1 comment 0 reactions 0 assignees View on GitHub
Dominant language
JavaScript
Stars
3
Forks
4
PR merge metrics
No merged PRs in 30d

Description

This issue has been generated on-behalf of Mik317 (https://huntr.dev/app/users/Mik317)

# Overview
[windows-edge](https://www.npmjs.com/package/windows-edge) allows you to launch a new Microsoft Edge tab on Windows

The issue occurs because a `user input` is formatted inside a `command` that will be executed without any check.

# Bug Bounty

We have opened up a bounty for this issue on our bug bounty platform. Want to solve this vulnerability and get rewarded 💰? Go to https://huntr.dev/

We will submit a pull request directly to your repository with the fix as soon as possible. Want to learn more? Go to https://github.com/418sec/huntr 📚

_Automatically generated by @huntr-helper..._

Contributor guide

No contributing guide indexed for this repository

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.