CVE-2024-27980 - Vulnerability Details

Link	Providers
http://www.openwall.com/lists/oss-security/2024/04/10/15
http://www.openwall.com/lists/oss-security/2024/07/11/6
http://www.openwall.com/lists/oss-security/2024/07/19/3
https://flatt.tech/research/posts/batbadbut-you-cant-securely-execute-commands-on-windows/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/5MZN6PFXHTCCUENAKZXTGWPKUAHI6E2W/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JUWBYDVCUSCX7YWTBX75LADMCVYFBGKU/
https://nvd.nist.gov/vuln/detail/CVE-2024-27980
https://www.cve.org/CVERecord?id=CVE-2024-27980

Type	Values Removed	Values Added
Weaknesses		CWE-77
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}`

Type	Values Removed	Values Added
Description	A command injection flaw was found in Node.js exclusive to Windows environments. This flaw allows an attacker to perform command injection via the args parameter of child_process.spawn without the shell option enabled on Windows. This behavior is caused by cmd.exe when executing batch files, which has complicated parsing rules for arguments that were not able to be safely escaped. It is possible to inject commands if an attacker can control part of the command arguments of the batch file.	Due to the improper handling of batch files in child_process.spawn / child_process.spawnSync, a malicious command line argument can inject arbitrary commands and achieve code execution even if the shell option is not enabled.
References		http://www.openwall.com/lists/oss-security/2024/04/10/15 http://www.openwall.com/lists/oss-security/2024/07/11/6 http://www.openwall.com/lists/oss-security/2024/07/19/3 https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/5MZN6PFXHTCCUENAKZXTGWPKUAHI6E2W/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JUWBYDVCUSCX7YWTBX75LADMCVYFBGKU/
Metrics		cvssV3_0 `{'score': 8.1, 'vector': 'CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H'}`

Show plain JSON

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2024-27980", "assignerOrgId": "36234546-b8fa-4601-9d6f-f4e334aa8ea1", "state": "PUBLISHED", "assignerShortName": "hackerone", "dateReserved": "2024-02-29T01:04:06.640Z", "datePublished": "2025-01-09T00:33:47.722Z", "dateUpdated": "2025-04-30T22:25:25.133Z"}, "containers": {"cna": {"descriptions": [{"lang": "en", "value": "Due to the improper handling of batch files in child_process.spawn / child_process.spawnSync, a malicious command line argument can inject arbitrary commands and achieve code execution even if the shell option is not enabled."}], "affected": [{"product": "Node", "vendor": "NodeJS", "defaultStatus": "unaffected", "versions": [{"versionType": "semver", "version": "4.0", "status": "affected", "lessThan": "4.*"}, {"versionType": "semver", "version": "5.0", "status": "affected", "lessThan": "5.*"}, {"versionType": "semver", "version": "6.0", "status": "affected", "lessThan": "6.*"}, {"versionType": "semver", "version": "7.0", "status": "affected", "lessThan": "7.*"}, {"versionType": "semver", "version": "8.0", "status": "affected", "lessThan": "8.*"}, {"versionType": "semver", "version": "9.0", "status": "affected", "lessThan": "9.*"}, {"versionType": "semver", "version": "10.0", "status": "affected", "lessThan": "10.*"}, {"versionType": "semver", "version": "11.0", "status": "affected", "lessThan": "11.*"}, {"versionType": "semver", "version": "12.0", "status": "affected", "lessThan": "12.*"}, {"versionType": "semver", "version": "13.0", "status": "affected", "lessThan": "13.*"}, {"versionType": "semver", "version": "14.0", "status": "affected", "lessThan": "14.*"}, {"versionType": "semver", "version": "15.0", "status": "affected", "lessThan": "15.*"}, {"versionType": "semver", "version": "16.0", "status": "affected", "lessThan": "16.*"}, {"versionType": "semver", "version": "17.0", "status": "affected", "lessThan": "17.*"}, {"versionType": "semver", "version": "18.0", "status": "affected", "lessThan": "18.20.2"}, {"versionType": "semver", "version": "19.0", "status": "affected", "lessThan": "19.*"}, {"versionType": "semver", "version": "20.0", "status": "affected", "lessThan": "20.12.2"}, {"versionType": "semver", "version": "21.0", "status": "affected", "lessThan": "21.7.3"}]}], "references": [{"url": "http://www.openwall.com/lists/oss-security/2024/04/10/15"}, {"url": "http://www.openwall.com/lists/oss-security/2024/07/11/6"}, {"url": "http://www.openwall.com/lists/oss-security/2024/07/19/3"}, {"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/5MZN6PFXHTCCUENAKZXTGWPKUAHI6E2W/"}, {"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JUWBYDVCUSCX7YWTBX75LADMCVYFBGKU/"}], "metrics": [{"cvssV3_0": {"version": "3.0", "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "baseScore": 8.1, "baseSeverity": "HIGH"}}], "providerMetadata": {"orgId": "36234546-b8fa-4601-9d6f-f4e334aa8ea1", "shortName": "hackerone", "dateUpdated": "2025-04-30T22:25:25.133Z"}}, "adp": [{"problemTypes": [{"descriptions": [{"type": "CWE", "cweId": "CWE-77", "lang": "en", "description": "CWE-77 Improper Neutralization of Special Elements used in a Command ('Command Injection')"}]}], "metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2025-01-09T21:31:55.670251Z", "id": "CVE-2024-27980", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-01-09T21:33:15.547Z"}}]}}

{

dataType : CVE_RECORD (string)

dataVersion : 5.1 (string)

cveMetadata : { »

cveId : CVE-2024-27980 (string)

assignerOrgId : 36234546-b8fa-4601-9d6f-f4e334aa8ea1 (string)

state : PUBLISHED (string)

assignerShortName : hackerone (string)

dateReserved : 2024-02-29T01:04:06.640Z (string)

datePublished : 2025-01-09T00:33:47.722Z (string)

dateUpdated : 2025-04-30T22:25:25.133Z (string)

}

containers : { »

cna : { »

descriptions : [ »

0 : { »

lang : en (string)

value : Due to the improper handling of batch files in child_process.spawn / child_process.spawnSync, a malicious command line argument can inject arbitrary commands and achieve code execution even if the shell option is not enabled. (string)

}

]

affected : [ »

0 : { »

product : Node (string)

vendor : NodeJS (string)

defaultStatus : unaffected (string)

versions : [ »

0 : { »

versionType : semver (string)

version : 4.0 (string)

status : affected (string)

lessThan : 4.* (string)

}

1 : { »

versionType : semver (string)

version : 5.0 (string)

status : affected (string)

lessThan : 5.* (string)

}

2 : { »

versionType : semver (string)

version : 6.0 (string)

status : affected (string)

lessThan : 6.* (string)

}

3 : { »

versionType : semver (string)

version : 7.0 (string)

status : affected (string)

lessThan : 7.* (string)

}

4 : { »

versionType : semver (string)

version : 8.0 (string)

status : affected (string)

lessThan : 8.* (string)

}

5 : { »

versionType : semver (string)

version : 9.0 (string)

status : affected (string)

lessThan : 9.* (string)

}

6 : { »

versionType : semver (string)

version : 10.0 (string)

status : affected (string)

lessThan : 10.* (string)

}

7 : { »

versionType : semver (string)

version : 11.0 (string)

status : affected (string)

lessThan : 11.* (string)

}

8 : { »

versionType : semver (string)

version : 12.0 (string)

status : affected (string)

lessThan : 12.* (string)

}

9 : { »

versionType : semver (string)

version : 13.0 (string)

status : affected (string)

lessThan : 13.* (string)

}

10 : { »

versionType : semver (string)

version : 14.0 (string)

status : affected (string)

lessThan : 14.* (string)

}

11 : { »

versionType : semver (string)

version : 15.0 (string)

status : affected (string)

lessThan : 15.* (string)

}

12 : { »

versionType : semver (string)

version : 16.0 (string)

status : affected (string)

lessThan : 16.* (string)

}

13 : { »

versionType : semver (string)

version : 17.0 (string)

status : affected (string)

lessThan : 17.* (string)

}

14 : { »

versionType : semver (string)

version : 18.0 (string)

status : affected (string)

lessThan : 18.20.2 (string)

}

15 : { »

versionType : semver (string)

version : 19.0 (string)

status : affected (string)

lessThan : 19.* (string)

}

16 : { »

versionType : semver (string)

version : 20.0 (string)

status : affected (string)

lessThan : 20.12.2 (string)

}

17 : { »

versionType : semver (string)

version : 21.0 (string)

status : affected (string)

lessThan : 21.7.3 (string)

}

]

}

]

references : [ »

0 : { »

url : http://www.openwall.com/lists/oss-security/2024/04/10/15 (string)

}

1 : { »

url : http://www.openwall.com/lists/oss-security/2024/07/11/6 (string)

}

2 : { »

url : http://www.openwall.com/lists/oss-security/2024/07/19/3 (string)

}

3 : { »

url : https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/5MZN6PFXHTCCUENAKZXTGWPKUAHI6E2W/ (string)

}

4 : { »

url : https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JUWBYDVCUSCX7YWTBX75LADMCVYFBGKU/ (string)

}

]

metrics : [ »

0 : { »

cvssV3_0 : { »

version : 3.0 (string)

vectorString : CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H (string)

baseScore : 8.1 (number)

baseSeverity : HIGH (string)

}

]

providerMetadata : { »

orgId : 36234546-b8fa-4601-9d6f-f4e334aa8ea1 (string)

shortName : hackerone (string)

dateUpdated : 2025-04-30T22:25:25.133Z (string)

}

adp : [ »

0 : { »

problemTypes : [ »

0 : { »

descriptions : [ »

0 : { »

type : CWE (string)

cweId : CWE-77 (string)

lang : en (string)

description : CWE-77 Improper Neutralization of Special Elements used in a Command ('Command Injection') (string)

}

]

}

]

metrics : [ »

0 : { »

other : { »

type : ssvc (string)

content : { »

timestamp : 2025-01-09T21:31:55.670251Z (string)

id : CVE-2024-27980 (string)

options : [ »

0 : { »

Exploitation : none (string)

}

1 : { »

Automatable : no (string)

}

2 : { »

Technical Impact : total (string)

}

]

role : CISA Coordinator (string)

version : 2.0.3 (string)

}

]

title : CISA ADP Vulnrichment (string)

providerMetadata : { »

orgId : 134c704f-9b21-4f2e-91b3-4a467353bcc0 (string)

shortName : CISA-ADP (string)

dateUpdated : 2025-01-09T21:33:15.547Z (string)

}

]

}

Show plain JSON

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2024-27980", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2025-01-09T21:31:55.670251Z"}}}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-77", "description": "CWE-77 Improper Neutralization of Special Elements used in a Command ('Command Injection')"}]}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-01-09T21:32:59.312Z"}}], "cna": {"metrics": [{"cvssV3_0": {"version": "3.0", "baseScore": 8.1, "baseSeverity": "HIGH", "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H"}}], "affected": [{"vendor": "NodeJS", "product": "Node", "versions": [{"status": "affected", "version": "4.0", "lessThan": "4.*", "versionType": "semver"}, {"status": "affected", "version": "5.0", "lessThan": "5.*", "versionType": "semver"}, {"status": "affected", "version": "6.0", "lessThan": "6.*", "versionType": "semver"}, {"status": "affected", "version": "7.0", "lessThan": "7.*", "versionType": "semver"}, {"status": "affected", "version": "8.0", "lessThan": "8.*", "versionType": "semver"}, {"status": "affected", "version": "9.0", "lessThan": "9.*", "versionType": "semver"}, {"status": "affected", "version": "10.0", "lessThan": "10.*", "versionType": "semver"}, {"status": "affected", "version": "11.0", "lessThan": "11.*", "versionType": "semver"}, {"status": "affected", "version": "12.0", "lessThan": "12.*", "versionType": "semver"}, {"status": "affected", "version": "13.0", "lessThan": "13.*", "versionType": "semver"}, {"status": "affected", "version": "14.0", "lessThan": "14.*", "versionType": "semver"}, {"status": "affected", "version": "15.0", "lessThan": "15.*", "versionType": "semver"}, {"status": "affected", "version": "16.0", "lessThan": "16.*", "versionType": "semver"}, {"status": "affected", "version": "17.0", "lessThan": "17.*", "versionType": "semver"}, {"status": "affected", "version": "18.0", "lessThan": "18.20.2", "versionType": "semver"}, {"status": "affected", "version": "19.0", "lessThan": "19.*", "versionType": "semver"}, {"status": "affected", "version": "20.0", "lessThan": "20.12.2", "versionType": "semver"}, {"status": "affected", "version": "21.0", "lessThan": "21.7.3", "versionType": "semver"}], "defaultStatus": "unaffected"}], "references": [{"url": "http://www.openwall.com/lists/oss-security/2024/04/10/15"}, {"url": "http://www.openwall.com/lists/oss-security/2024/07/11/6"}, {"url": "http://www.openwall.com/lists/oss-security/2024/07/19/3"}, {"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/5MZN6PFXHTCCUENAKZXTGWPKUAHI6E2W/"}, {"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JUWBYDVCUSCX7YWTBX75LADMCVYFBGKU/"}], "descriptions": [{"lang": "en", "value": "Due to the improper handling of batch files in child_process.spawn / child_process.spawnSync, a malicious command line argument can inject arbitrary commands and achieve code execution even if the shell option is not enabled."}], "providerMetadata": {"orgId": "36234546-b8fa-4601-9d6f-f4e334aa8ea1", "shortName": "hackerone", "dateUpdated": "2025-04-30T22:25:25.133Z"}}}, "cveMetadata": {"cveId": "CVE-2024-27980", "state": "PUBLISHED", "dateUpdated": "2025-04-30T22:25:25.133Z", "dateReserved": "2024-02-29T01:04:06.640Z", "assignerOrgId": "36234546-b8fa-4601-9d6f-f4e334aa8ea1", "datePublished": "2025-01-09T00:33:47.722Z", "assignerShortName": "hackerone"}, "dataVersion": "5.1"}

{

dataType : CVE_RECORD (string)

containers : { »

adp : [ »

0 : { »

title : CISA ADP Vulnrichment (string)

metrics : [ »

0 : { »

other : { »

type : ssvc (string)

content : { »

id : CVE-2024-27980 (string)

role : CISA Coordinator (string)

options : [ »

0 : { »

Exploitation : none (string)

}

1 : { »

Automatable : no (string)

}

2 : { »

Technical Impact : total (string)

}

]

version : 2.0.3 (string)

timestamp : 2025-01-09T21:31:55.670251Z (string)

}

]

problemTypes : [ »

0 : { »

descriptions : [ »

0 : { »

lang : en (string)

type : CWE (string)

cweId : CWE-77 (string)

description : CWE-77 Improper Neutralization of Special Elements used in a Command ('Command Injection') (string)

}

]

}

]

providerMetadata : { »

orgId : 134c704f-9b21-4f2e-91b3-4a467353bcc0 (string)

shortName : CISA-ADP (string)

dateUpdated : 2025-01-09T21:32:59.312Z (string)

}

]

cna : { »

metrics : [ »

0 : { »

cvssV3_0 : { »

version : 3.0 (string)

baseScore : 8.1 (number)

baseSeverity : HIGH (string)

vectorString : CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H (string)

}

]

affected : [ »

0 : { »

vendor : NodeJS (string)

product : Node (string)

versions : [ »

0 : { »

status : affected (string)

version : 4.0 (string)

lessThan : 4.* (string)

versionType : semver (string)

}

1 : { »

status : affected (string)

version : 5.0 (string)

lessThan : 5.* (string)

versionType : semver (string)

}

2 : { »

status : affected (string)

version : 6.0 (string)

lessThan : 6.* (string)

versionType : semver (string)

}

3 : { »

status : affected (string)

version : 7.0 (string)

lessThan : 7.* (string)

versionType : semver (string)

}

4 : { »

status : affected (string)

version : 8.0 (string)

lessThan : 8.* (string)

versionType : semver (string)

}

5 : { »

status : affected (string)

version : 9.0 (string)

lessThan : 9.* (string)

versionType : semver (string)

}

6 : { »

status : affected (string)

version : 10.0 (string)

lessThan : 10.* (string)

versionType : semver (string)

}

7 : { »

status : affected (string)

version : 11.0 (string)

lessThan : 11.* (string)

versionType : semver (string)

}

8 : { »

status : affected (string)

version : 12.0 (string)

lessThan : 12.* (string)

versionType : semver (string)

}

9 : { »

status : affected (string)

version : 13.0 (string)

lessThan : 13.* (string)

versionType : semver (string)

}

10 : { »

status : affected (string)

version : 14.0 (string)

lessThan : 14.* (string)

versionType : semver (string)

}

11 : { »

status : affected (string)

version : 15.0 (string)

lessThan : 15.* (string)

versionType : semver (string)

}

12 : { »

status : affected (string)

version : 16.0 (string)

lessThan : 16.* (string)

versionType : semver (string)

}

13 : { »

status : affected (string)

version : 17.0 (string)

lessThan : 17.* (string)

versionType : semver (string)

}

14 : { »

status : affected (string)

version : 18.0 (string)

lessThan : 18.20.2 (string)

versionType : semver (string)

}

15 : { »

status : affected (string)

version : 19.0 (string)

lessThan : 19.* (string)

versionType : semver (string)

}

16 : { »

status : affected (string)

version : 20.0 (string)

lessThan : 20.12.2 (string)

versionType : semver (string)

}

17 : { »

status : affected (string)

version : 21.0 (string)

lessThan : 21.7.3 (string)

versionType : semver (string)

}

]

defaultStatus : unaffected (string)

}

]

references : [ »

0 : { »

url : http://www.openwall.com/lists/oss-security/2024/04/10/15 (string)

}

1 : { »

url : http://www.openwall.com/lists/oss-security/2024/07/11/6 (string)

}

2 : { »

url : http://www.openwall.com/lists/oss-security/2024/07/19/3 (string)

}

3 : { »

url : https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/5MZN6PFXHTCCUENAKZXTGWPKUAHI6E2W/ (string)

}

4 : { »

url : https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JUWBYDVCUSCX7YWTBX75LADMCVYFBGKU/ (string)

}

]

descriptions : [ »

0 : { »

lang : en (string)

value : Due to the improper handling of batch files in child_process.spawn / child_process.spawnSync, a malicious command line argument can inject arbitrary commands and achieve code execution even if the shell option is not enabled. (string)

}

]

providerMetadata : { »

orgId : 36234546-b8fa-4601-9d6f-f4e334aa8ea1 (string)

shortName : hackerone (string)

dateUpdated : 2025-04-30T22:25:25.133Z (string)

}

cveMetadata : { »

cveId : CVE-2024-27980 (string)

state : PUBLISHED (string)

dateUpdated : 2025-04-30T22:25:25.133Z (string)

dateReserved : 2024-02-29T01:04:06.640Z (string)

assignerOrgId : 36234546-b8fa-4601-9d6f-f4e334aa8ea1 (string)

datePublished : 2025-01-09T00:33:47.722Z (string)

assignerShortName : hackerone (string)

}

dataVersion : 5.1 (string)

}

Show plain JSON

{"cveTags": [], "descriptions": [{"lang": "en", "value": "Due to the improper handling of batch files in child_process.spawn / child_process.spawnSync, a malicious command line argument can inject arbitrary commands and achieve code execution even if the shell option is not enabled."}, {"lang": "es", "value": "Debido al gesti\u00f3n inadecuado de archivos por lotes en child_process.spawn / child_process.spawnSync, un argumento de l\u00ednea de comandos malicioso puede inyectar comandos arbitrarios y lograr la ejecuci\u00f3n de c\u00f3digo incluso si la opci\u00f3n de shell no est\u00e1 habilitada."}], "id": "CVE-2024-27980", "lastModified": "2025-01-09T22:15:27.777", "metrics": {"cvssMetricV30": [{"cvssData": {"attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 8.1, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.0"}, "exploitabilityScore": 2.2, "impactScore": 5.9, "source": "support@hackerone.com", "type": "Secondary"}]}, "published": "2025-01-09T01:15:08.367", "references": [{"source": "support@hackerone.com", "url": "http://www.openwall.com/lists/oss-security/2024/04/10/15"}, {"source": "support@hackerone.com", "url": "http://www.openwall.com/lists/oss-security/2024/07/11/6"}, {"source": "support@hackerone.com", "url": "http://www.openwall.com/lists/oss-security/2024/07/19/3"}, {"source": "support@hackerone.com", "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/5MZN6PFXHTCCUENAKZXTGWPKUAHI6E2W/"}, {"source": "support@hackerone.com", "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JUWBYDVCUSCX7YWTBX75LADMCVYFBGKU/"}], "sourceIdentifier": "support@hackerone.com", "vulnStatus": "Received", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-77"}], "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "type": "Secondary"}]}

{

cveTags : [ *empty* ]

descriptions : [ »

0 : { »

lang : en (string)

value : Due to the improper handling of batch files in child_process.spawn / child_process.spawnSync, a malicious command line argument can inject arbitrary commands and achieve code execution even if the shell option is not enabled. (string)

}

1 : { »

lang : es (string)

value : Debido al gestión inadecuado de archivos por lotes en child_process.spawn / child_process.spawnSync, un argumento de línea de comandos malicioso puede inyectar comandos arbitrarios y lograr la ejecución de código incluso si la opción de shell no está habilitada. (string)

}

]

id : CVE-2024-27980 (string)

lastModified : 2025-01-09T22:15:27.777 (string)

metrics : { »

cvssMetricV30 : [ »

0 : { »

cvssData : { »

attackComplexity : HIGH (string)

attackVector : NETWORK (string)

availabilityImpact : HIGH (string)

baseScore : 8.1 (number)

baseSeverity : HIGH (string)

confidentialityImpact : HIGH (string)

integrityImpact : HIGH (string)

privilegesRequired : NONE (string)

scope : UNCHANGED (string)

userInteraction : NONE (string)

vectorString : CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H (string)

version : 3.0 (string)

}

exploitabilityScore : 2.2 (number)

impactScore : 5.9 (number)

source : support@hackerone.com (string)

type : Secondary (string)

}

]

}

published : 2025-01-09T01:15:08.367 (string)

references : [ »

0 : { »

source : support@hackerone.com (string)

url : http://www.openwall.com/lists/oss-security/2024/04/10/15 (string)

}

1 : { »

source : support@hackerone.com (string)

url : http://www.openwall.com/lists/oss-security/2024/07/11/6 (string)

}

2 : { »

source : support@hackerone.com (string)

url : http://www.openwall.com/lists/oss-security/2024/07/19/3 (string)

}

3 : { »

source : support@hackerone.com (string)

url : https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/5MZN6PFXHTCCUENAKZXTGWPKUAHI6E2W/ (string)

}

4 : { »

source : support@hackerone.com (string)

url : https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JUWBYDVCUSCX7YWTBX75LADMCVYFBGKU/ (string)

}

]

sourceIdentifier : support@hackerone.com (string)

vulnStatus : Received (string)

weaknesses : [ »

0 : { »

description : [ »

0 : { »

lang : en (string)

value : CWE-77 (string)

}

]

source : 134c704f-9b21-4f2e-91b3-4a467353bcc0 (string)

type : Secondary (string)

}

]

}

Show plain JSON

{"bugzilla": {"description": "Node.js: Fail to Escape Arguments Properly in Microsoft Windows", "id": "2270693", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2270693"}, "csaw": false, "cwe": "CWE-78", "details": ["Due to the improper handling of batch files in child_process.spawn / child_process.spawnSync, a malicious command line argument can inject arbitrary commands and achieve code execution even if the shell option is not enabled.", "A command injection flaw was found in Node.js exclusive to Windows environments. This flaw allows an attacker to perform command injection via the args parameter of child_process.spawn without the shell option enabled on Windows. This behavior is caused by cmd.exe when executing batch files, which has complicated parsing rules for arguments that were not able to be safely escaped. It is possible to inject commands if an attacker can control part of the command arguments of the batch file."], "name": "CVE-2024-27980", "package_state": [{"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Not affected", "package_name": "nodejs:16/nodejs", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Not affected", "package_name": "nodejs:18/nodejs", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Not affected", "package_name": "nodejs:20/nodejs", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Not affected", "package_name": "nodejs", "product_name": "Red Hat Enterprise Linux 9"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Not affected", "package_name": "nodejs:18/nodejs", "product_name": "Red Hat Enterprise Linux 9"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Not affected", "package_name": "nodejs:20/nodejs", "product_name": "Red Hat Enterprise Linux 9"}], "public_date": "2024-04-09T00:00:00Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2024-27980\nhttps://nvd.nist.gov/vuln/detail/CVE-2024-27980\nhttps://flatt.tech/research/posts/batbadbut-you-cant-securely-execute-commands-on-windows/"], "statement": "This vulnerability exclusively applies to applications running on Windows."}

{

bugzilla : { »

description : Node.js: Fail to Escape Arguments Properly in Microsoft Windows (string)

id : 2270693 (string)

url : https://bugzilla.redhat.com/show_bug.cgi?id=2270693 (string)

}

csaw : false (boolean)

cwe : CWE-78 (string)

details : [ »

0 : Due to the improper handling of batch files in child_process.spawn / child_process.spawnSync, a malicious command line argument can inject arbitrary commands and achieve code execution even if the shell option is not enabled. (string)

1 : A command injection flaw was found in Node.js exclusive to Windows environments. This flaw allows an attacker to perform command injection via the args parameter of child_process.spawn without the shell option enabled on Windows. This behavior is caused by cmd.exe when executing batch files, which has complicated parsing rules for arguments that were not able to be safely escaped. It is possible to inject commands if an attacker can control part of the command arguments of the batch file. (string)

]

name : CVE-2024-27980 (string)

package_state : [ »

0 : { »

cpe : cpe:/o:redhat:enterprise_linux:8 (string)