description: pomelo-monitor through 0.3.7 is vulnerable to Command Injection.It allows injection of arbitrary commands as part of 'pomelo-monitor' params.
problem types: Command Injection
affected:
{
product: pomelo-monitor
vendor: n/a
versions:
status: affected, version: All versions including 0.3.7
}