All versions of package mc-kill-port are vulnerable to Arbitrary Command Execution via the kill function, due to missing sanitization of the port argument.
References
| Link | Resource |
|---|---|
| https://security.snyk.io/vuln/SNYK-JS-MCKILLPORT-2419070 | Exploit Third Party Advisory |
| https://www.npmjs.com/package/mc-kill-port | Product Third Party Advisory |
Configurations
History
12 Aug 2022, 17:52
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:a:mc-kill-port_project:mc-kill-port:*:*:*:*:*:node.js:*:* | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 7.8 |
| CWE | CWE-88 | |
| References | (CONFIRM) https://security.snyk.io/vuln/SNYK-JS-MCKILLPORT-2419070 - Exploit, Third Party Advisory | |
| References | (CONFIRM) https://www.npmjs.com/package/mc-kill-port - Product, Third Party Advisory |
10 Aug 2022, 20:15
| Type | Values Removed | Values Added |
|---|---|---|
| Summary | All versions of package mc-kill-port are vulnerable to Arbitrary Command Execution via the kill function, due to missing sanitization of the port argument. |
10 Aug 2022, 05:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2022-08-10 05:15
Updated : 2024-02-04 22:51
NVD link : CVE-2022-25973
Mitre link : CVE-2022-25973
CVE.ORG link : CVE-2022-25973
JSON object : View
Products Affected
mc-kill-port_project
- mc-kill-port
CWE
CWE-88
Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')