connection-tester is a module that tests to check if the connection can be established or host/port reachable for a given host and port. Useful for testing all the connection in your node application at server startup.
Affected versions of this package are vulnerable to Command Injection. The injection point is located in line 15 in
The following PoC demonstrates the vulnerability:
var a = require("connection-tester"); a.test("& touch 111","& touch 222",123)
connection-tester to version 0.2.1 or higher.