Samba Client
1 CVEs
product
Monthly
The samba-client package before 4.0.0 for Node.js allows command injection because of the use of process.exec. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.
Node.js
Command Injection
Samba Client
NVD
GitHub
CVSS 3.1
9.8
EPSS
4.8%
CVE-2021-27185
npm
EPSS 5%
CVSS 9.8
CRITICAL
POC
PATCH
Act Now
The samba-client package before 4.0.0 for Node.js allows command injection because of the use of process.exec. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.
Node.js
Command Injection
Samba Client
NVD
GitHub