cordova-serve

vulnerability remote code execution
severity 3.8
language javascript
registry npm

Overview

cordova-serve provides a JavaScript API to serve up a Cordova application in the browser.

The issue occurs because a user input is formatted inside a command that will be executed without any check.