An issue was discovered in the add function in Shenzhim AAPTJS 1.3.1 which allows attackers to execute arbitrary code via the filePath parameter.
Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-26707
Reference (s):
- https://github.com/shenzhim/aaptjs/issues/2
- URL: https://github.com/shenzhim/aaptjs/issues/2