ZeroHour

CVE-2021-34082

PoC ×2
CVSS 3.1
9.8 critical
EPSS
5%p92
Published
()
Modified
Description

OS Command Injection vulnerability in allenhwkim proctree through 0.1.1 and commit 0ac10ae575459457838f14e21d5996f2fa5c7593 for Node.js, allows attackers to execute arbitrary commands via the fix function.

Vendors
proctree project
Products
proctree
Weakness
CWE-78
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

In the news

No ingested article mentions this CVE yet.