← Back

Port Killer

port-killer

Vendor: Port Killer Project • 1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2021-23359
1Port Killer Project
1Port Killer
Nov 21, 2024
Mar 18, 2021
N/A· v4
8.8 HIGH· v3
6.5 MEDIUM· v2
This affects all versions of package port-killer. If (attacker-controlled) user input is given, it is possible for an attacker to execute arbitrary commands. This is due to use of the child_process exec function without...Show more
This affects all versions of package port-killer. If (attacker-controlled) user input is given, it is possible for an attacker to execute arbitrary commands. This is due to use of the child_process exec function without input sanitization. Running this PoC will cause the command touch success to be executed, leading to the creation of a file called success.Show less