← Back

Traceroute Project

traceroute_project

1 CVE • 1 product

Products (1)

Click to collapse
Toggle
Traceroute
traceroute
1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2018-21268
1Traceroute Project
1Traceroute
Nov 21, 2024
Jun 25, 2020
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
The traceroute (aka node-traceroute) package through 1.0.0 for Node.js allows remote command injection via the host parameter. This occurs because the Child.exec() method, which is considered to be not entirely safe, is...Show more
The traceroute (aka node-traceroute) package through 1.0.0 for Node.js allows remote command injection via the host parameter. This occurs because the Child.exec() method, which is considered to be not entirely safe, is used. In particular, an OS command can be placed after a newline character.Show less