Lucene search

K
ubuntucveUbuntu.comUB:CVE-2024-27980
HistoryApr 12, 2024 - 12:00 a.m.

CVE-2024-27980

2024-04-1200:00:00
ubuntu.com
ubuntu.com
17
nodejs
command injection
child_process.spawn
windows
cve-2024-27980

7.3 High

AI Score

Confidence

Low

0 Low

EPSS

Percentile

0.0%

ML-Date: 2024-04-10 13:36:20, ML-Subject: [oss-security] NodeJS Command
injection via args parameter of child_process.spawn without shell option
enabled on Windows (CVE-2024-27980)

Notes

Author Note
alexmurray Only affects nodejs on Windows so nodejs in Ubuntu is not-affected.

7.3 High

AI Score

Confidence

Low

0 Low

EPSS

Percentile

0.0%