CVE-2022-25973

Arbitrary Command Execution

All versions of package mc-kill-port are vulnerable to Arbitrary Command Execution via the kill function, due to missing sanitization of the port argument.

Affected

mc-kill-port

CVSS v3.1 NVD

7.8 HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS

0.49% chance of exploitation in the next 30 days, 41st percentile

Published

2022-08-10

Updated

2024-09-16

Proof-of-concept exploits (1)

• https://security.snyk.io/vuln/SNYK-JS-MCKILLPORT-2419070

Security advisories

• https://www.npmjs.com/package/mc-kill-port
• advisories/GHSA-2cg4-7q4x-7rr2

References

• CVE Record
• NVD entry