Not rated
CVE-2019-5414 If an attacker can control the port, which in itself is a very sensitive value, they can inject arbitrary OS commands…
Description
If an attacker can control the port, which in itself is a very sensitive value, they can inject arbitrary OS commands due to the usage of the exec function in a third-party module kill-port < 1.3.2.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| kill-port 1.3 | earliest → < 1.3.2 | 1.3.2 |