Security Advisory
CVE-2020-7609
9.8
CRITICAL
Vulnerability Description
node-rules including 3.0.0 and prior to 5.0.0 allows injection of arbitrary commands. The argument rules of function "fromJSON()" can be controlled by users without any sanitization.
Published Date
April 27, 2020
Official Source
NIST NVD Advisory