Lucene search
Veracode Vulnerability DatabaseVERACODE:29716HistoryMar 16, 2021 - 5:52 a.m.
Arbitrary Command Injection
2021-03-1605:52:27
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
7
0.005 Low
EPSS
Percentile
76.5%
kill-process-by-name is vulnerable to arbitrary command injection. The vulnerability exists due to the use of the child_process exec function without input sanitization in the index.js file.
| CPE | Name | Operator | Version |
|---|---|---|---|
| kill-process-by-name | le | 1.0.5 |
References
Related
prion
prion
Input validation
2021-03-15 17:15:00
nvd
nvd
CVE-2021-23356
2021-03-15 17:15:21
cve
cve
CVE-2021-23356
2021-03-15 17:15:21
osv
osv
Code injection in kill-process-by-name
2021-03-19 21:19:18
cvelist
cvelist
CVE-2021-23356 Arbitrary Command Injection
2021-03-15 00:00:00
github
github
Code injection in kill-process-by-name
2021-03-19 21:19:18