Homepage

connection-tester@0.0.7 vulnerabilities

test if the connection can be established with the given host and port

  • latest version

    0.2.1

  • latest non vulnerable version

    0.2.1

  • first published

    11 years ago

  • latest version published

    3 years ago

  • licenses detected

  • View connection-tester package health on Snyk Advisor  (opens in a new tab)
    • Go back to all versions of this package
    Report a new vulnerability Found a mistake?

    Direct Vulnerabilities

    Known vulnerabilities in the connection-tester package. This does not include vulnerabilities belonging to this package’s dependencies.

    How to fix?

    Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.

    Fix for free
    VulnerabilityVulnerable Version
    • C
    Command Injection

    connection-tester is a module that tests to check if the connection can be established or host/port reachable for a given host and port. Useful for testing all the connection in your node application at server startup.

    Affected versions of this package are vulnerable to Command Injection. The injection point is located in line 15 in index.js.

    The following PoC demonstrates the vulnerability:

    PoC

    var a = require("connection-tester");
a.test("& touch 111","& touch 222",123)

    How to fix Command Injection?

    Upgrade connection-tester to version 0.2.1 or higher.

    <0.2.1
    Go back to all versions of this package