Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:33431
HistoryDec 23, 2021 - 3:33 a.m.

Command Injection

2021-12-2303:33:12
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
4
node-windows
command injection
vulnerability
remote attacker
shell commands

EPSS

0.005

Percentile

77.3%

node-windows is vulnerable to command injection. The vulnerability exists because the PID parameter is not sanitized, which allows a remote attacker to inject arbitrary shell commands.

EPSS

0.005

Percentile

77.3%

Related for VERACODE:33431