OS Command Injection

2021-02-0907:13:18

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

node-ps

os command injection

childprocess.exec

untrusted input

validation

sanitization

software

EPSS

0.025

Percentile

90.2%

JSON

node-ps is vulnerable to OS command injection. The vulnerability exists as untrusted input is passed to childProcess.exec is not validated and sanitized.

References

github.com/fortruce/node-ps/blob/3111230bbc64d49edb8231b9215a2d228c284c1e/lib/index.js#L72

github.com/fortruce/node-ps/blob/master/lib/index.js%23L72

www.npmjs.com/package/node-ps

EPSS

0.025

Percentile

90.2%

JSON

Related for VERACODE:29309