CVE:CVE-2021-23330
CNNVD:CNNVD-202102-064
Bitovi Launchpad是加拿大Bitovi公司的一款基于Javscript可为Mac Os、Windows、Linux(like)提供本地浏览器功能的软件。
launchpad 所有版本存在命令注入漏洞，该漏洞允许通过stop命令注入。
solution:Upgrade bitovi launchpad to a higher version than 0.1.0,0.2.0,0.2.1,0.3.0,0.4.0,0.4.1,0.4.2,0.4.3,0.4.4,0.4.5,0.4.6,0.4.7,0.4.8,0.4.9,0.5.0,0.5.1,0.5.2,0.5.3,0.5.4,0.6.0,0.7.0,0.7.1,0.7.2,0.7.3,0.7.4,0.7.5,and avoid the version 0.1.0,0.2.0,0.2.1,0.3.0,0.4.0,0.4.1,0.4.2,0.4.3,0.4.4,0.4.5,0.4.6,0.4.7,0.4.8,0.4.9,0.5.0,0.5.1,0.5.2,0.5.3,0.5.4,0.6.0,0.7.0,0.7.1,0.7.2,0.7.3,0.7.4,0.7.5