CVE-2021-21315
1 advisory.
npm/systeminformation CVE-2021-21315: high 7.8, exploited
Command Injection Vulnerability
Action: Upgrade systeminformation to 5.3.1 or later.
npm i systeminformation@5.3.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 5.3.1 | - |
Fixed versions
| 5.3.1 |
Sources
- osv: GHSA-2m8v-572m-ff2v
- kev: CVE-2021-21315
- https://github.com/sebhildebrandt/systeminformation/security/advisories/GHSA-2m8v-572m-ff2v
- https://nvd.nist.gov/vuln/detail/CVE-2021-21315
- https://github.com/sebhildebrandt/systeminformation/commit/07daa05fb06f24f96297abaa30c2ace8bfd8b525
- https://github.com/sebhildebrandt/systeminformation
- https://lists.apache.org/thread.html/r8afea9a83ed568f2647cccc6d8d06126f9815715ddf9a4d479b26b05%40%3Cissues.cordova.apache.org%3E
- https://lists.apache.org/thread.html/r8afea9a83ed568f2647cccc6d8d06126f9815715ddf9a4d479b26b05@%3Cissues.cordova.apache.org%3E
- https://security.netapp.com/advisory/ntap-20210312-0007
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-21315
- https://www.npmjs.com/package/systeminformation
CVE-2021-21315 · published · modified · JSON