coldbraid

CVE-2021-21315 Npm Package System Information Library For Node.JS

In this vulnerability, an attacker can send a malicious payload that will exploit the name parameter. After successful exploitation, attackers can execute remote.

CVSS
not scored

CWE-78

On CISA’s exploited list

System Information Library for Node.JS Command Injection

Added
2022-01-18
Federal patch deadline
2022-02-01
Ransomware use
not known