Launchpad.net

CVE 2019-4001

Improper input validation in Druva inSync Client 6.5.0 allows a local, authenticated attacker to execute arbitrary NodeJS code.

See the CVE page on Mitre.org for more details.

References