CVE-2021-34082 Vulnerability in npm package proctree

Description

OS Command Injection vulnerability in allenhwkim proctree through 0.1.1 and commit 0ac10ae575459457838f14e21d5996f2fa5c7593 for Node.js, allows attackers to execute arbitrary commands via the fix function.

Remediation

References

https://github.com/allenhwkim/proctree/blob/master/index.js#L46

https://advisory.checkmarx.net/advisory/CX-2021-4783

Related Vulnerabilities

CVE-2022-39300 Vulnerability in npm package node-saml

CVE-2020-28442 Vulnerability in npm package js-data

CVE-2023-34238 Vulnerability in npm package gatsby-plugin-sharp

CVE-2020-12725 Vulnerability in npm package redash

CVE-2014-0002 Vulnerability in maven package org.apache.camel:camel-core

Severity

Critical

Classification

CWE-78 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H