March 22, 2024
Severity High Analysis Summary Ducktail Malware is a malicious program designed by hackers to infiltrate computers and networks globally. Ducktail malware is typically delivered through a […]
Rewterz Threat Advisory – CVE-2021-23001 – F5 BIG-IP (Advanced WAF, ASM) security bypass
April 1, 2021
Rewterz Threat Alert – Russian APT Gamaredon Using Template Injection
April 1, 2021
Rewterz Threat Advisory – CVE-2021-23001 – F5 BIG-IP (Advanced WAF, ASM) security bypass
April 1, 2021
Rewterz Threat Alert – Russian APT Gamaredon Using Template Injection
April 1, 2021
Severity
Medium
Analysis Summary
CVE-2021-23348
Node.js portprocesses module could allow a remote authenticated attacker to execute arbitrary commands on the system, caused by improper input validation by the killProcess function. By sending a specially-crafted request, an attacker could exploit this vulnerability to execute arbitrary commands on the system.
Impact
Gain access
Affected Vendors
NodeJs
Affected Products
- Node.js portprocesses 1.0.4
- Node.js portprocesses 1.0.3
Remediation
Upgrade to the latest version of portprocesses (1.0.5 or later)