CVE-2020-7609

Name of the Vulnerable Software and Affected Versions node-rules versions 3.0.0 through 5.0.0

Description The issue allows for the injection of arbitrary commands. This is possible because the argument rules of the function fromJSON() can be controlled by users without any sanitization, enabling potential exploitation.

Recommendations For node-rules versions 3.0.0 through 5.0.0, consider disabling the fromJSON() function until a patch is available to prevent the injection of arbitrary commands. Restrict access to this function to minimize the risk of exploitation.