Lucene search

K

Killport Project Security Vulnerabilities

cve
cve

CVE-2021-23360

This affects the package killport before 1.0.2. If (attacker-controlled) user input is given, it is possible for an attacker to execute arbitrary commands. This is due to use of the child_process exec function without input sanitization. Running this PoC will cause the command touch success to be.....

8.8CVSS

9AI Score

0.003EPSS

2021-03-21 04:15 PM
40
4