Traceroute Project

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Traceroute Project records in CISA KEV

No Traceroute Project vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

1 record

TI-2018-15228 CVE-2018-21268 · GHSA-8j9v-qhp4-wv55

MEDIUM 50

The traceroute (aka node-traceroute) package through 1.0.0 for Node.js allows remote command injection via the host parameter.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.04286 Published 2020-06-25 No fix listed CWE-74