Description
A Code Injection exists in treekill on Windows which allows a remote code execution when an attacker is able to control the input into the command.
Remediation
References
https://hackerone.com/reports/703415
Related Vulnerabilities
CVE-2023-22493 Vulnerability in npm package rsshub
CVE-2017-16176 Vulnerability in npm package jansenstuffpleasework
CVE-2016-10546 Vulnerability in maven package org.webjars:pouchdb
CVE-2023-27025 Vulnerability in maven package com.ruoyi:ruoyi-quartz
CVE-2016-4999 Vulnerability in maven package org.dashbuilder:dashbuilder-dataset-sql