Lucene search
GoogleOSV:CVE-2021-23363HistoryMar 30, 2021 - 3:15 p.m.
CVE-2021-23363
2021-03-3015:15:15
Google
osv.dev
2
This affects the package kill-by-port before 0.0.2. If (attacker-controlled) user input is given to the killByPort function, it is possible for an attacker to execute arbitrary commands. This is due to use of the child_process exec function without input sanitization.
| CPE | Name | Operator | Version |
|---|---|---|---|
| kill-by-port | eq | 0.0.1 |
Related
osv
osv
Arbitrary code execution in kill-by-port
2021-04-13 15:32:43
prion
prion
Design/Logic Flaw
2021-03-30 15:15:00
nvd
nvd
CVE-2021-23363
2021-03-30 15:15:15
veracode
veracode
OS Command Injection
2021-03-31 03:16:49
github
github
Arbitrary code execution in kill-by-port
2021-04-13 15:32:43
cve
cve
CVE-2021-23363
2021-03-30 15:15:15
cvelist
cvelist
CVE-2021-23363 Arbitrary Command Injection
2021-03-30 00:00:00