CVE-2023-2479: OS Command Injection in appium/appium-desktop
Published May 2, 2023
·Updated
appium-desktop v1.14.1 and prior is vulnerable to OS Command Injection.
Other sources
OS Command Injection in GitHub repository appium/appium-desktop prior to v1.22.3-4.
Affected Software
2 affected components
npm/appium-desktop<=1.14.1
appium appium-desktop<1.22.3-4
Remediation
Event History
May 2, 2023
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
DescriptionSeverityWeakness
Data Sourced
03:15 PM
DescriptionWeakness
Advisory Published
03:30 PM
Frequently Asked Questions
1
What is the severity of CVE-2023-2479?
CVE-2023-2479 has a critical severity rating of 9.8 according to the CVSS scoring system.
2
How do I fix CVE-2023-2479?
To fix CVE-2023-2479, upgrade to appium-desktop version 1.22.3-4 or later.
3
What vulnerabilities are associated with CVE-2023-2479?
CVE-2023-2479 is associated with OS Command Injection vulnerabilities in appium-desktop.
4
What versions of appium-desktop are affected by CVE-2023-2479?
appium-desktop versions prior to v1.22.3-4 are affected by CVE-2023-2479.
5
What type of vulnerability is CVE-2023-2479?
CVE-2023-2479 is classified as an OS Command Injection vulnerability.