Description
A Code Injection exists in tree-kill on Windows which allows a remote code execution when an attacker is able to control the input into the command.
Remediation
References
https://hackerone.com/reports/701183
Related Vulnerabilities
CVE-2021-39133 Vulnerability in maven package org.rundeck:rundeck
CVE-2018-1999002 Vulnerability in maven package org.jenkins-ci.main:jenkins-core
CVE-2017-12625 Vulnerability in maven package org.apache.hive.hcatalog:hive-hcatalog-core
CVE-2017-9795 Vulnerability in maven package org.apache.geode:geode-core
CVE-2019-0221 Vulnerability in maven package org.apache.tomcat.embed:tomcat-embed-core