CVEDB API

Vulnerabilities

By Date
Known Exploited
Advanced Search

Vulnerable Software

Vendors
Products

Vulnerability Details CVE-2021-34082

OS Command Injection vulnerability in allenhwkim proctree through 0.1.1 and commit 0ac10ae575459457838f14e21d5996f2fa5c7593 for Node.js, allows attackers to execute arbitrary commands via the fix function.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.137

EPSS Ranking 94.0%

CVSS Severity

CVSS v3 Score 9.8

CVSS v2 Score 10.0

References

https://advisory.checkmarx.net/advisory/CX-2021-4783
https://github.com/allenhwkim/proctree/blob/master/index.js#L46
https://advisory.checkmarx.net/advisory/CX-2021-4783
https://github.com/allenhwkim/proctree/blob/master/index.js#L46

Products affected by CVE-2021-34082

Proctree Project » Proctree » Version: N/A

cpe:2.3:a:proctree_project:proctree:-
Proctree Project » Proctree » Version: 0.1.0

cpe:2.3:a:proctree_project:proctree:0.1.0
Proctree Project » Proctree » Version: 0.1.1

cpe:2.3:a:proctree_project:proctree:0.1.1

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2021-34082

Products

Pricing

Contact Us