CVE-2021-21315 Npm Package System Information Library For Node.JS
In this vulnerability, an attacker can send a malicious payload that will exploit the name parameter. After successful exploitation, attackers can execute remote.
- CVSS
- not scored
On CISA’s exploited list
System Information Library for Node.JS Command Injection
- Added
- 2022-01-18
- Federal patch deadline
- 2022-02-01
- Ransomware use
- not known