Node2Shell
A class of command injection vulnerabilities targeting the Node.js ecosystem, triggered by the combination of specific function calls and untrusted input.
Timeline (last 90 days)
Node2Shell was originally a command injection class of vulnerability in the Node.js ecosystem, with attack paths depending on specific combinations of function calls and input handling.
From Log4Shell to Node2Shell, attackers continue to look for common defects in underlying general-purpose components.
All Facts (2)
Node2Shell was originally a command injection class of vulnerability in the Node.js ecosystem, with attack paths depending on specific combinations of function calls and input handling.
50%UnverifiedFrom Log4Shell to Node2Shell, attackers continue to look for common defects in underlying general-purpose components.
50%