Lucene search
GoogleOSV:GHSA-R3J7-X2G5-9GX6HistoryFeb 11, 2021 - 8:47 p.m.
Command injection in samba-client
2021-02-1120:47:27
Google
osv.dev
9
samba-client
command injection
node.js
process.exec
software
EPSS
0.005
Percentile
75.5%
The samba-client package before 4.0.0 for Node.js allows command injection because of the use of process.exec.
References
advisory.checkmarx.net/advisory/CX-2021-4302
github.com/eflexsystems/node-samba-client
github.com/eflexsystems/node-samba-client/commit/5bc3bbad9b8d02243bc861a11ec73f788fbb1235
github.com/eflexsystems/node-samba-client/releases/tag/4.0.0
nvd.nist.gov/vuln/detail/CVE-2021-27185
security.netapp.com/advisory/ntap-20210319-0002
www.npmjs.com/package/samba-client
Related
nvd
nvd
CVE-2021-27185
2021-02-10 22:15:13
nodejs
nodejs
Command Injection
2021-02-24 03:09:27
github
github
Command injection in samba-client
2021-02-11 20:47:27
veracode
veracode
Remote Code Execution (RCE)
2021-02-11 05:23:05
OS Command Injection
2021-02-15 04:14:55
prion
prion
Command injection
2021-02-10 22:15:00
cvelist
cvelist
CVE-2021-27185
2021-02-10 21:04:28
cve
cve
CVE-2021-27185
2021-02-10 22:15:13
osv
osv
CVE-2021-27185
2021-02-10 22:15:13