CVE-2021-23374

CVE-2021-23374 is a critical command injection vulnerability affecting all versions of the ps-visitor package. It allows unauthenticated attackers to execute arbitrary commands on a vulnerable system by providing malicious input to the 'kill' function, due to improper input sanitization within the 'child_process exec' function. This vulnerability carries a CVSS score of 9.8 (Critical), indicating a severe risk with no user interaction required and complete compromise of confidentiality, integrity, and availability. While there is no evidence of active exploitation (KEV, Hot List inactive) and no public exploit modules (Metasploit, Nuclei, ExploitDB), the vulnerability has garnered significant community discussion, suggesting awareness among security researchers.