The printDirect function in lib/printer.js in the node-printer module 0.0.1 and earlier for Node.js allows remote attackers to execute arbitrary commands via unspecified characters in the lpr command.
CVSS 3.0CRITICAL 9.8·Network·No auth·No interaction·EPSS 0.03759·Published 2017-10-23·Fixed in 0.0.2CWE-77
