CVE-2014-9682

Published February 28th, 2015

View on NVD ↗

CVSS v3

N/A

CVSS v2

HIGH

Affected

PROJECT

Description

The dns-sync module before 0.1.1 for node.js allows context-dependent attackers to execute arbitrary commands via shell metacharacters in the first argument to the resolve API function.

skoranga/node-dns-sync

Sync version of DNS lookup. Useful for server startup activities.

GitHub