CyberRota Analysis
AI-GeneratedA vulnerability in the syncfusion ej2-javascript-ui-controls library, affecting versions up to 33.2.3, allows for OS command injection through the child_process.exec function in package.json. This medium-severity issue requires local access for exploitation and has been publicly disclosed, making it critical for developers and organizations using this library to prioritize remediation. Immediate action is recommended to mitigate potential risks associated with local attacks.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A security vulnerability has been detected in syncfusion ej2-javascript-ui-controls up to 33.2.3. This affects the function child_process.exec of the file package.json. The manipulation leads to os command injection. An attack has to be approached locally. The exploit has been disclosed publicly and may be used.