CVE:CVE-2023-26493
CNNVD:CNNVD-202303-2400
Cocos Engine是中国Xiamen Yaji的是一个用于构建2D和3D实时渲染和交互内容的开源框架。
Cocos Engine存在命令注入漏洞，该漏洞源于存在命令注入，攻击者利用该漏洞可以运行自定义命令。
solution:Upgrade cocos cocos-engine to a higher version than 2023-02-20,and avoid the version (,2023-02-20)