OS Command Injection

🗓️ 26 Jun 2020 02:43:58Reported by Veracode Vulnerability DatabaseType

veracode

veracode🔗 sca.analysiscenter.veracode.com👁 17 Views

node-traceroute OS command injection vulnerabilit

Reporter	Title	Published	Views	Family All 12
GithubExploit	Exploit for Injection in Traceroute_Project Traceroute	21 May 202600:20	–	githubexploit
Circl	CVE-2018-21268	25 Jun 202020:55	–	circl
CNVD	traceroute injection vulnerability	28 Jun 202000:00	–	cnvd
CVE	CVE-2018-21268	25 Jun 202016:56	–	cve
Cvelist	CVE-2018-21268	25 Jun 202016:56	–	cvelist
EUVD	EUVD-2022-3192	3 Oct 202520:07	–	euvd
Github Security Blog	Node-Traceroute RCE Vulnerability	24 May 202217:21	–	github
NVD	CVE-2018-21268	25 Jun 202017:15	–	nvd
OSV	GHSA-8J9V-QHP4-WV55 Node-Traceroute RCE Vulnerability	24 May 202217:21	–	osv
Prion	Command injection	25 Jun 202017:15	–	prion

Vulners

Node

traceroute_project tracerouteRange0.0.1–1.0.0js

Source	Link
github	www.github.com/jaw187/node-traceroute/commit/b99ee024a01a40d3d20a92ad3769cc78a3f6386f
github	www.github.com/jaw187/node-traceroute/tags
medium	www.medium.com/%40shay_62828/shell-command-injection-through-traceroute-npm-package-a4cf7b6553e3
medium	www.medium.com/@shay_62828/shell-command-injection-through-traceroute-npm-package-a4cf7b6553e3
linkedin	www.linkedin.com/posts/op-innovate_shell-command-injection-through-traceroute-activity-6678956453086191616-Rcpy
npmjs	www.npmjs.com/package/traceroute
op-c	www.op-c.net/2020/06/17/shell-command-injection-through-traceroute-npm-package/
npmjs	www.npmjs.com/advisories/1465

07 Nov 2023 23:31Current

4.6Medium risk

Vulners AI Score4.6

CVSS 3.19.8 - 10

CVSS 27.5

EPSS0.06517

os command injection node-traceroute child.exec() method untrusted user input arbitrary os commands