CVE-2021-27185

The samba-client package before 4.0.0 for Node.js allows command injection because of the use of process.exec...

Command Injection

Overview Affected versions of the samba-client package allow command injection because of the use of process.exec. Recommendation Upgrade to version 4.0.0 or later References - CVE - GitHub Advisory...

CVE-2021-27185

The samba-client package before 4.0.0 for Node.js allows command injection because of the use of process.exec...

CVE-2021-27185

The samba-client package before 4.0.0 for Node.js allows command injection because of the use of process.exec...

CVE-2021-27185

The CVE-2021-27185 vulnerability affects the samba-client package for Node.js, where command injection is possible due to the use of process.exec in versions before 4.0.0. The issue enables an attacker to inject and execute arbitrary OS commands on the host via the Samba client functionality. The...