CVE-2019-5414CWE-77

If an attacker can control the port, which in itself is a very sensitive value, they can inject arbitrary OS commands due to the usage of the exec function in…

published March 17, 2019

CVSS
—
EPSS
2%
Percentile
79.3
In the wild
Unconfirmed
What it is

If an attacker can control the port, which in itself is a very sensitive value, they can inject arbitrary OS commands due to the usage of the exec function in a third-party module kill-port < 1.3.2.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01887 · 79.3th percentile
Weakness
CWE-77 · Improper Neutralization of Special Elements used in a Command ('Command Injection')
Published
2019-03-17T19:42Z
EPSS history
Timeline
  • 17 MAR 19:42Z
    If an attacker can control the port, which in itself is a very sensitive value, they can inject arbitrary OS commands due to the usage of the exec function in…
    cvelistv5