CVE-2023-2479

Description

appium-desktop v1.14.1 and prior is vulnerable to OS Command Injection.

How to fix CVE-2023-2479

No fixed version has been published yet. Mitigate by removing the affected package or applying upstream guidance from the references below.

• npm/appium-desktop—no fix listed

Is CVE-2023-2479 being exploited?

Moderate — EPSS is 22.0%. Track this CVE but it's not at the top of the prioritisation list.

Affected packages (1)

• from 0, <= 1.14.1

CVSS scores

References (4)

• ADVISORYnvd.nist.gov/vuln/detail/CVE-2023-2479
• PATCHgithub.com/appium/appium-desktop
• WEBgithub.com/appium/appium-desktop/commit/12a988aa08b9822e97056a09486c9bebb3aad8fe
• WEBhuntr.dev/bounties/fbdeec3c-d197-4a68-a547-7f93fb9594b4