Remote Code Execution (RCE)

2021-03-2201:37:43

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

0.003 Low

EPSS

Percentile

65.6%

JSON

killport is vulnerable to remote code execution. The vulnerability exists due to the use of the child_process.exec function without input sanitization.

CPENameOperatorVersion
killportle1.0.1

CPE	Name	Operator	Version
	killport	le	1.0.1

References

github.com/ssnau/killport/blob/5268f23ea8f152e47182b263d8f7ef20c12a9f28/index.js#23L9

github.com/ssnau/killport/blob/5268f23ea8f152e47182b263d8f7ef20c12a9f28/index.js%23L9

github.com/ssnau/killport/commit/bec8e371f170a12e11cd222ffc7a6e1ae9942638

0.003 Low

EPSS

Percentile

65.6%

JSON

Related for VERACODE:29771