CVE-2022-1440

🗓️ 22 Apr 2022 17:30:13Reported by @huntrdevType

cve🔗 web.nvd.nist.gov📰️ 1 Media mentions👁 79 Views

Command Injection vulnerability in [email protected] in GitHub repository yarkeev/git-interface prior to 2.1.2. If both are provided by user input, then the use of a `--upload-pack` command-line argument feature of git is also supported for `git clone`, which would then allow for any operating system command to be spawned by the attacker

Reporter	Title	Published	Views	Family All 14
ATTACKERKB	CVE-2022-1440	22 Apr 202218:15	–	attackerkb
Huntr	Command Injection vulnerability in [email protected]	16 Apr 202210:32	–	huntr
Circl	CVE-2022-1440	22 Apr 202222:27	–	circl
CNNVD	git-interface 操作系统命令注入漏洞	22 Apr 202200:00	–	cnnvd
Cvelist	CVE-2022-1440 Command Injection vulnerability in [email protected] in yarkeev/git-interface	22 Apr 202217:30	–	cvelist
Github Security Blog	Command injection in git-interface	23 Apr 202200:03	–	github
NVD	CVE-2022-1440	22 Apr 202218:15	–	nvd
OSV	CVE-2022-1440 Command Injection vulnerability in [email protected] in yarkeev/git-interface	22 Apr 202217:30	–	osv
OSV	GHSA-QFFW-8WG7-H665 Command injection in git-interface	23 Apr 202200:03	–	osv
Prion	Command injection	22 Apr 202218:15	–	prion

NVD

Node

git-interface_project git-interfaceRange<2.1.2node.js

[
  {
    "product": "yarkeev/git-interface",
    "vendor": "yarkeev",
    "versions": [
      {
        "lessThan": "2.1.2",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
huntr	www.huntr.dev/bounties/cdc25408-d3c1-4a9d-bb45-33b12a715ca1
github	www.github.com/yarkeev/git-interface/commit/f828aa790016fee3aa667f7b44cf94bf0aa8c60d

21 Nov 2024 06:40Current

9.8High risk

Vulners AI Score9.8

CVSS 3.19.8

CVSS 210

CVSS 39.8

EPSS0.08545

CWE-78