NodeJS System Information Library Command Injection (CVE-2021-21315)

Binary data nodejscve-2021-21315.nbin...

CVE-2021-21388

systeminformation is an open source system and OS information library for node.js. A command injection vulnerability has been discovered in versions of systeminformation prior to 5.6.4. The issue has been fixed with a parameter check on user input. Please upgrade to version = 5.6.4. If you cannot...

CVE-2021-21388: Improper Input Validation

systeminformation is an open source system and OS information library for node.js. A command injection vulnerability has been discovered in versions of systeminformation prior to 5.6.4. The issue has been fixed with a parameter check on user input. Please upgrade to version = 5.6.4. If you cannot...

PT-2021-4725

Name of the Vulnerable Software and Affected Versions systeminformation versions prior to 5.6.4 Description A command injection issue has been discovered in the systeminformation library for Node.js. This issue is related to errors in passing data to parameters of services such as si.inetLatency,...

CVE-2021-21315

The System Information Library for Node.JS npm package "systeminformation" is an open source collection of functions to retrieve detailed hardware, system and OS information. In systeminformation before version 5.3.1 there is a command injection vulnerability. Problem was fixed in version 5.3.1. ...

CVE-2021-21315: Improper Neutralization of Special Elements used in an OS Command

The System Information Library for Node.JS npm package "systeminformation" is an open source collection of functions to retrieve detailed hardware, system and OS information. In systeminformation before version 5.3.1 there is a command injection vulnerability. Problem was fixed in version 5.3.1. ...

PT-2020-16396

Name of the Vulnerable Software and Affected Versions systeminformation versions prior to 4.31.1 Description The issue is a command injection vulnerability. It was fixed with a shell string sanitation fix. There is no information about the estimated number of potentially affected devices worldwid...

PT-2020-16411

Name of the Vulnerable Software and Affected Versions systeminformation versions prior to 4.26.2 Description The issue is a command injection vulnerability. It was fixed with a shell string sanitation fix. Recommendations For versions prior to 4.26.2, upgrade to version 4.26.2 or later to resolve...