{"id":"EUVD-2022-4302","enisaUuid":"4e11b772-9489-3839-95e2-aeef77ad3aba","description":"A Code Injection exists in treekill on Windows which allows a remote code execution when an attacker is able to control the input into the command.","datePublished":"Dec 18, 2019, 8:58:31 PM","dateUpdated":"Aug 5, 2024, 12:49:13 AM","baseScore":null,"references":"https://hackerone.com/reports/703415\n","aliases":"CVE-2019-15598\nGHSA-j7fq-p9q7-5wfv\n","assigner":"hackerone","epss":2.74,"enisaIdProduct":[{"id":"4e217f2b-ef5f-3cd5-9061-f8014fbe9907","product":{"name":"treekill","vendor":{"name":"n/a"}},"product_version":"Not fixed"}],"enisaIdVendor":[{"id":"92df6f95-c18d-3ed5-b024-d4d1c908a4c4","vendor":{"name":"n/a"}}],"enisaIdVulnerability":[{"id":"4ba615b4-c526-3a00-8def-e3415270f7e0","vulnerability":{"id":"CVE-2019-15598","description":"A Code Injection exists in treekill on Windows which allows a remote code execution when an attacker is able to control the input into the command.","datePublished":"Dec 18, 2019, 8:58:31 PM","dateUpdated":"Aug 5, 2024, 12:49:13 AM","status":"PUBLISHED","baseScore":null,"references":"https://hackerone.com/reports/703415\n","enisa_id":"EUVD-2022-4302\n","assigner":"hackerone","epss":2.74,"dataProcessed":"Nov 3, 2026, 7:13:25 AM","vulnerabilityProduct":[{"id":"526028e4-2b97-31fd-a840-af0ef30a8ec1","product":{"name":"treekill","vendor":{"name":"n/a"}},"product_version":"Not fixed"}],"vulnerabilityVendor":[{"id":"23d136bf-ccdf-391e-bed2-b8298d6fecda","vendor":{"name":"n/a"}}]}},{"id":"52587d27-b1cb-3a0d-aabc-24ca7027332e","vulnerability":{"id":"GHSA-j7fq-p9q7-5wfv","description":"Treekill Enables OS Command Injection","datePublished":"May 24, 2022, 5:04:00 PM","dateUpdated":"Apr 22, 2024, 11:20:00 PM","baseScore":null,"references":"https://nvd.nist.gov/vuln/detail/CVE-2019-15598\nhttps://github.com/pkrumins/node-tree-kill/issues/30\nhttps://github.com/pkrumins/node-tree-kill/pull/31\nhttps://github.com/pkrumins/node-tree-kill/commit/ff73dbf144c4c2daa67799a50dfff59cd455c63c\nhttps://hackerone.com/reports/701183\nhttps://hackerone.com/reports/703415\nhttps://github.com/node-modules/treekill/blob/master/index.js#L32\nhttps://github.com/pkrumins/node-tree-kill\nhttps://security.snyk.io/vuln/SNYK-JS-TREEKILL-536781\n","enisa_id":"EUVD-2022-4302\n","aliases":"CVE-2019-15598\nGHSA-j7fq-p9q7-5wfv\n","epss":0.0,"dataProcessed":"May 3, 2026, 2:02:50 AM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}}],"enisaIdAdvisory":[]}