CVE-2018-21268

🗓️ 25 Jun 2020 16:56:53Reported by mitreType

cve

cve🔗 web.nvd.nist.gov👁 76 Views

The traceroute package for Node.js allows remote command injection via host parameter

Reporter	Title	Published	Views	Family All 12
GithubExploit	Exploit for Injection in Traceroute_Project Traceroute	21 May 202600:20	–	githubexploit
Circl	CVE-2018-21268	25 Jun 202020:55	–	circl
CNVD	traceroute injection vulnerability	28 Jun 202000:00	–	cnvd
Cvelist	CVE-2018-21268	25 Jun 202016:56	–	cvelist
EUVD	EUVD-2022-3192	3 Oct 202520:07	–	euvd
Github Security Blog	Node-Traceroute RCE Vulnerability	24 May 202217:21	–	github
NVD	CVE-2018-21268	25 Jun 202017:15	–	nvd
OSV	GHSA-8J9V-QHP4-WV55 Node-Traceroute RCE Vulnerability	24 May 202217:21	–	osv
Prion	Command injection	25 Jun 202017:15	–	prion
RedhatCVE	CVE-2018-21268	9 Jan 202608:55	–	redhatcve

NVD

Node

traceroute_project tracerouteRange≤1.0.0node.js

Source	Link
medium	www.medium.com/%40shay_62828/shell-command-injection-through-traceroute-npm-package-a4cf7b6553e3
github	www.github.com/jaw187/node-traceroute/tags
snyk	www.snyk.io/vuln/npm:traceroute:20160311
linkedin	www.linkedin.com/posts/op-innovate_shell-command-injection-through-traceroute-activity-6678956453086191616-Rcpy
npmjs	www.npmjs.com/package/traceroute
github	www.github.com/jaw187/node-traceroute/commit/b99ee024a01a40d3d20a92ad3769cc78a3f6386f
npmjs	www.npmjs.com/advisories/1465
op-c	www.op-c.net/2020/06/17/shell-command-injection-through-traceroute-npm-package/

17 Jun 2026 01:54Current

9.7High risk

Vulners AI Score9.7

CVSS 27.5

CVSS 3.19.8 - 10

EPSS0.04286

traceroute node.js remote command injection cve-2018-21268 security vulnerability nvd