Lucene search
+L
Get-process-by-name ProjectGet-process-by-name

1 matches found

CVE
CVE
added 2022/08/29 5:5 a.m.63 views

CVE-2022-25644

CVE-2022-25644 affects the npm package @pendo324/get-process-by-name, with all versions vulnerable to Arbitrary Code Execution due to improper sanitization of the getProcessByName function. The root cause is mishandling of input that allows code injection, enabling remote attackers to execute arb...

9.8CVSS9.7AI score0.0122EPSS
Save