Lucene search
+L

1 matches found

OSV
OSV
added 2020/09/04 4:57 p.m.31 views

GHSA-884P-74JH-XRG2 Command Injection in tree-kill

Versions of tree-kill prior to 1.2.2 are vulnerable to Command Injection. The package fails to sanitize values passed to the kill function. If this value is user-controlled it may allow attackers to run arbitrary commands in the server. The issue only affects Windows systems. Recommendation Upgra...

9.8CVSS7.3AI score0.02742EPSS
SaveExploits0References5
Rows per page
Query Builder