Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2021-102384
HistoryDec 24, 2021 - 12:00 a.m.

Nodejs command injection vulnerability

2021-12-2400:00:00
China National Vulnerability Database
www.cnvd.org.cn
7
nodejs
command injection
lib/cmd.js
vulnerability
detailed
pid parameter
event-driven
non-blocking io
package
chromev8 engine

EPSS

0.005

Percentile

77.3%

nodejs is a JavaScript runtime environment based on the ChromeV8 engine that makes it possible to develop high-performance backend applications using Javascript through the packaging of the Chromev8 engine and the use of event-driven and non-blocking IO applications. .0-beta.6 before the node-windows package, lib/cmd.js allows command injection via the PID parameter. No detailed vulnerability details are currently available.

EPSS

0.005

Percentile

77.3%

Related for CNVD-2021-102384