Remote Code Execution (RCE)

2021-04-1900:26:13

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

remote code execution

portkiller

input sanitization

EPSS

0.005

Percentile

76.1%

JSON

portkiller is vulnerable to remote code execution. The vulnerability exists due to the usage of the child_process.exec function without input sanitization.

References

github.com/indatawetrust/portkiller/blob/f1f1c5076d9c5d60e8dd3930e98d665d8191aa7a/index.js%23L10

github.com/indatawetrust/portkiller/commit/f1f1c5076d9c5d60e8dd3930e98d665d8191aa7a

EPSS

0.005

Percentile

76.1%

JSON

Related for VERACODE:30016