Lucene search

K
prionPRIOn knowledge basePRION:CVE-2021-23360
HistoryMar 21, 2021 - 4:15 p.m.

Input validation

2021-03-2116:15:00
PRIOn knowledge base
www.prio-n.com
3

9 High

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

65.6%

This affects the package killport before 1.0.2. If (attacker-controlled) user input is given, it is possible for an attacker to execute arbitrary commands. This is due to use of the child_process exec function without input sanitization. Running this PoC will cause the command touch success to be executed, leading to the creation of a file called success.

CPENameOperatorVersion
killportlt1.0.2

9 High

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

65.6%

Related for PRION:CVE-2021-23360