CVE-2020-7781

Name of the Vulnerable Software and Affected Versions connection-tester versions prior to 0.2.1

Description The issue affects the connection-tester package, where the injection point is located in line 15 of index.js, making affected versions vulnerable to Command Injection.

Recommendations For versions prior to 0.2.1, update to version 0.2.1 or later to resolve the issue. As a temporary workaround, consider restricting access to the vulnerable code in index.js until a patch is applied.