Facebook React-Dev-Utils vulnerabilities

2 CVEs affecting Facebook React-Dev-Utils, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2021-24033, published 2021-03-09.

More from Facebook.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2021-24033, published 2021-03-09. Medium severity, CVSS 5.6. EPSS: 3.3% chance of exploitation in the next 30 days. react-dev-utils prior to v11.0.4 exposes a function, getProcessForPort, where an input argument is concatenated into a command string to be executed. This function is typically used from…
• CVE-2018-6342, published 2018-12-31. Critical severity, CVSS 9.8. EPSS: 2.8% chance of exploitation in the next 30 days. react-dev-utils on Windows allows developers to run a local webserver for accepting various commands, including a command to launch an editor. The input to that command was not properly sanitized,…