Описание
A Code Injection exists in tree-kill on Windows which allows a remote code execution when an attacker is able to control the input into the command.
Ссылки
- Permissions RequiredThird Party Advisory
- Permissions RequiredThird Party Advisory
Уязвимые конфигурации
Конфигурация 1
cpe:2.3:a:tree-kill_project:tree-kill:1.2.1:*:*:*:*:node.js:*:*
EPSS
Процентиль: 88%
0.03754
Низкий
9.8 Critical
CVSS3
7.5 High
CVSS2
Дефекты
CWE-94
CWE-94
Связанные уязвимости
EPSS
Процентиль: 88%
0.03754
Низкий
9.8 Critical
CVSS3
7.5 High
CVSS2
Дефекты
CWE-94
CWE-94