Lucene search
Veracode Vulnerability DatabaseVERACODE:35857HistoryJun 03, 2022 - 7:20 a.m.
OS Command Injection
2022-06-0307:20:43
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
11
proctree vulnerability command injection getprocesstree index.js sanitization shell metacharacters fix function arbitary commands software
EPSS
0.004
Percentile
74.8%
proctree is vulnerable to OS command injection. The vulnerability exists in the getProcessTree function in index.js due to a lack of sanitization in shell metacharacters which allows attackers to execute arbitrary commands via the fix function.
Related
cvelist
cvelist
CVE-2021-34082
2022-06-01 14:31:53
osv
osv
OS Command Injection in proctree
2022-06-03 00:00:59
CVE-2021-34082
2022-06-02 14:15:28
nvd
nvd
CVE-2021-34082
2022-06-02 14:15:28
prion
prion
Command injection
2022-06-02 14:15:00
github
github
OS Command Injection in proctree
2022-06-03 00:00:59
cve
cve
CVE-2021-34082
2022-06-02 14:15:28