CVE-2021-27185

Published February 10th, 2021

View on NVD ↗

CVSS v3

9.8

CRITICAL

CVSS v2

7.5

HIGH

Affected

2

PROJECTS

Description

The samba-client package before 4.0.0 for Node.js allows command injection because of the use of process.exec.

wrapper for smbclient

NPM

eflexsystems/node-samba-client

Node.js wrapper for smbclient

GitHub

56