CVE-2020-36378

An issue was discovered in the packageCmd function in shenzhim aaptjs 1.3.1, allows attackers to execute arbitrary code via the filePath parameters.

Score

CVSS 3.1 9.8 Critical

Status

Modified - cve@mitre.org

Published

2021-10-31

Last modified

2024-08-04

Weaknesses

CWE-78

Affected products

• Aaptjs (Aaptjs Project)

References

• https://github.com/shenzhim/aaptjs/issues/2