Lucene search

K
osvGoogleOSV:GHSA-FC42-H7Q4-QP8H
HistoryApr 13, 2021 - 3:16 p.m.

Command Injection in killport

2021-04-1315:16:20
Google
osv.dev
13

0.003 Low

EPSS

Percentile

65.6%

This affects the package killport before 1.0.2. If (attacker-controlled) user input is given, it is possible for an attacker to execute arbitrary commands. This is due to use of the child_process exec function without input sanitization. Running this PoC will cause the command touch success to be executed, leading to the creation of a file called success.

CPENameOperatorVersion
killportlt1.0.2

0.003 Low

EPSS

Percentile

65.6%

Related for OSV:GHSA-FC42-H7Q4-QP8H