Skip to content
OpenAdvisories

Vendor

yued-fe

1 known vulnerabilities.

Products

1 result · Clear filters · Feed

  • High 7.3

    yued-fe LuLu UI run.js child_process.exec os command injection

    A security flaw has been discovered in yued-fe LuLu UI up to 3.0.0. This issue affects the function child_process.exec of the file run.js. The manipulation results in os command injection. The attack can be launched remotely. The vendor was contacted early ab…