HOMEVULNERABILITIESVENDORSTraceroute Project

Traceroute ProjectCVEs & Vulnerabilities

1 CVEs affecting Traceroute Project products, tracked from the National Vulnerability Database, with CVSS/EPSS scores and exploitation status.

1 CVEs→ All vendors

Most Affected Products

traceroute 1
CVE-2018-21268CRITICAL

The traceroute (aka node-traceroute) package through 1.0.0 for Node.js allows remote command injection via the host parameter. This occurs because the Child.exec() method, which is considered to be not entirely safe, is used. In particular, an OS command can be placed after a newline character.

25 Jun 2020
9.8
CVSS
← PrevPage 1 / 1Next →
← All Vendors·CVE Database
Traceroute Project CVEs & Vulnerabilities — 1 Tracked