mirror of
https://github.com/0xMarcio/cve.git
synced 2025-11-28 18:48:49 +00:00
2.5 KiB
2.5 KiB
CVE-2024-27980
Description
Due to the improper handling of batch files in child_process.spawn / child_process.spawnSync, a malicious command line argument can inject arbitrary commands and achieve code execution even if the shell option is not enabled.
POC
Reference
No PoCs from references.
Github
- https://github.com/ARPSyndicate/cve-scores
- https://github.com/Cybervixy/Vulnerability-Management
- https://github.com/Oju-kwu/Vulnerability-Management-Lab
- https://github.com/Oluwaseun-Joseph/Credentialed-Vulnerability-Assessment-Lab
- https://github.com/Teedico/Nessus_Vulnerability_Assessment
- https://github.com/ardhi/get-global-path
- https://github.com/sharmapintu987654321-boop/Nessus-Scan-Reports
- https://github.com/tanjiti/sec_profile
- https://github.com/tianstcht/tianstcht