CVE-2018-21268

🗓️ 25 Jun 2020 16:56:53Reported by mitreType

cvelist

cvelist🔗 www.cve.org👁 11 Views

Node.js traceroute allows remote command injectio

Reporter	Title	Published	Views	Family All 12
GithubExploit	Exploit for Injection in Traceroute_Project Traceroute	21 May 202600:20	–	githubexploit
Circl	CVE-2018-21268	25 Jun 202020:55	–	circl
CNVD	traceroute injection vulnerability	28 Jun 202000:00	–	cnvd
CVE	CVE-2018-21268	25 Jun 202016:56	–	cve
EUVD	EUVD-2022-3192	3 Oct 202520:07	–	euvd
Github Security Blog	Node-Traceroute RCE Vulnerability	24 May 202217:21	–	github
NVD	CVE-2018-21268	25 Jun 202017:15	–	nvd
OSV	GHSA-8J9V-QHP4-WV55 Node-Traceroute RCE Vulnerability	24 May 202217:21	–	osv
Prion	Command injection	25 Jun 202017:15	–	prion
RedhatCVE	CVE-2018-21268	9 Jan 202608:55	–	redhatcve

Source	Link
medium	www.medium.com/%40shay_62828/shell-command-injection-through-traceroute-npm-package-a4cf7b6553e3
github	www.github.com/jaw187/node-traceroute/tags
snyk	www.snyk.io/vuln/npm:traceroute:20160311
linkedin	www.linkedin.com/posts/op-innovate_shell-command-injection-through-traceroute-activity-6678956453086191616-Rcpy
npmjs	www.npmjs.com/package/traceroute
github	www.github.com/jaw187/node-traceroute/commit/b99ee024a01a40d3d20a92ad3769cc78a3f6386f
npmjs	www.npmjs.com/advisories/1465
op-c	www.op-c.net/2020/06/17/shell-command-injection-through-traceroute-npm-package/

25 Jun 2020 16:56Current

9.8High risk

Vulners AI Score9.8

CVSS 3.110

EPSS0.06517

node.js traceroute remote command injection cve-2018-21268 child.exec() method