Lucene search
Veracode Vulnerability DatabaseVERACODE:29653HistoryMar 10, 2021 - 6:06 a.m.
OS Command Injection
2021-03-1006:06:19
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
10
0.002 Low
EPSS
Percentile
64.3%
react-dev-utils is vulnerable to OS command injection. An attacker is able to inject and execute arbitrary OS commands on the host OS due to the usage of child_process.execFileSync() in the function getProcessIdOnPort.
| CPE | Name | Operator | Version |
|---|---|---|---|
| react-dev-utils | le | 6.1.1 | |
| react-dev-utils | le | 11.0.3 | |
| react-dev-utils | le | 6.1.1 | |
| react-dev-utils | le | 11.0.3 |
Related
huntr
huntr
Command Injection in facebook/create-react-app
2021-03-03 00:00:00
github
github
react-dev-utils OS Command Injection in function `getProcessForPort`
2021-03-11 22:26:09
cve
cve
CVE-2021-24033
2021-03-09 01:15:13
osv
osv
react-dev-utils OS Command Injection in function `getProcessForPort`
2021-03-11 22:26:09
prion
prion
Command injection
2021-03-09 01:15:00
redhatcve
redhatcve
CVE-2021-24033
2021-03-09 09:03:06
cvelist
cvelist
CVE-2021-24033
2021-03-09 00:25:13
nvd
nvd
CVE-2021-24033
2021-03-09 01:15:13
ibm
ibm