.. / CVE-2021-21315

• RCE
• Nuclei
• Web

Exploit for Node.JS System Information Library <5.3.1 - Remote Command Injection (CVE-2021-21315)

Description:

Node.JS System Information Library System before version 5.3.1 is susceptible to remote command injection. Node.JS (npm package “systeminformation”) is an open source collection of functions to retrieve detailed hardware, system and OS information.

Nuclei Template

View the template here CVE-2021-21315.yaml

Validate with Nuclei

echo "$URL" | nuclei -t ~/nuclei-templates/http/cves/2021/CVE-2021-21315.yaml

References: