Non notée
CVE-2019-5414 If an attacker can control the port, which in itself is a very sensitive value, they can inject arbitrary OS commands…
Description
If an attacker can control the port, which in itself is a very sensitive value, they can inject arbitrary OS commands due to the usage of the exec function in a third-party module kill-port < 1.3.2.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| kill-port 1.3 | premières → < 1.3.2 | 1.3.2 |