description: Summit is a node web framework. When using the PouchDB driver in the module, Summit 0.1.0 and later allows an attacker to execute arbitrary commands via the collection name.
problem types: Code Injection (CWE-94)
affected:
{
product: summit node module
vendor: HackerOne
versions:
status: affected, version: >=0.1.0
}