| Package | Affected versions | Patched versions |
|---|---|---|
| total.js | < 2022-09-26 | 2022-09-26 |
In Total.js 4 before 0e5ace7, /api/common/ping can achieve remote command execution via shell metacharacters in the host parameter.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free