Lucene search
GoogleOSV:GHSA-R6FW-8M27-43C9HistoryMay 06, 2021 - 3:53 p.m.
Command injection in portkiller
2021-05-0615:53:20
Google
osv.dev
7
portkiller
command injection
software vulnerability
input sanitization
child process exec
EPSS
0.005
Percentile
76.1%
This affects all versions of package portkiller. If (attacker-controlled) user input is given, it is possible for an attacker to execute arbitrary commands. This is due to use of the child_process exec function without input sanitization.
Related
github
github
Command injection in portkiller
2021-05-06 15:53:20
cvelist
cvelist
CVE-2021-23379 Arbitrary Command Injection
2021-04-18 18:45:26
veracode
veracode
Remote Code Execution (RCE)
2021-04-19 00:26:13
prion
prion
Design/Logic Flaw
2021-04-18 19:15:00
nvd
nvd
CVE-2021-23379
2021-04-18 19:15:12
cve
cve
CVE-2021-23379
2021-04-18 19:15:12