Lucene search
+L

3 matches found

Prion
Prion
added 2021/04/18 7:15 p.m.24 views

Input validation

This affects all versions of package psnode. If attacker-controlled user input is given to the kill function, it is possible for an attacker to execute arbitrary commands. This is due to use of the childprocess exec function without input sanitization...

7.5CVSS9.7AI score0.01336EPSS
SaveExploits1References2
Cvelist
Cvelist
added 2021/04/18 6:40 p.m.50 views

CVE-2021-23375 Arbitrary Command Injection

This affects all versions of package psnode. If attacker-controlled user input is given to the kill function, it is possible for an attacker to execute arbitrary commands. This is due to use of the childprocess exec function without input sanitization...

7.3CVSS9.9AI score0.01336EPSS
SaveExploits1References2
CVE
CVE
added 2021/04/18 6:40 p.m.85 views

CVE-2021-23375

CVE-2021-23375 affects all versions of the npm package psnode. The vulnerability is a command injection in the kill function: attacker-controlled input passed to child_process.exec without input sanitization, enabling arbitrary commands. Multiple sources (NVD, GHSA, OSV, Veracode, CVE listings) c...

9.8CVSS8.8AI score0.01336EPSS
SaveExploits1References2Affected Software1
Rows per page
Query Builder