CVE-2021-23348

CVE-2021-23348 is a high-severity command injection vulnerability affecting the 'portprocesses' package prior to version 1.0.5. It allows an authenticated attacker to execute arbitrary commands by providing malicious input to the 'killProcess' function, due to improper sanitization of user input passed to 'child_process.exec'. The vulnerability has a CVSS score of 8.8, indicating a high potential for impact on confidentiality, integrity, and availability. There is currently no evidence of active exploitation, public exploit code, or significant community discussion surrounding this CVE.