3 matches found
CVE-2022-25644
All versions of package @pendo324/get-process-by-name are vulnerable to Arbitrary Code Execution due to improper sanitization of getProcessByName function...
9.8CVSS0.01244EPSS
SaveExploits1References2
CVE-2022-25644 Arbitrary Code Execution
All versions of package @pendo324/get-process-by-name are vulnerable to Arbitrary Code Execution due to improper sanitization of getProcessByName function...
9.8CVSS9.9AI score0.01244EPSS
SaveExploits1References2
CVE-2022-25644
CVE-2022-25644 affects the npm package @pendo324/get-process-by-name, with all versions vulnerable to Arbitrary Code Execution due to improper sanitization of the getProcessByName function. The root cause is mishandling of input that allows code injection, enabling remote attackers to execute arb...
9.8CVSS9.7AI score0.01244EPSS
SaveExploits1References2Affected Software1
20