Lucene search

K
cvelistSnykCVELIST:CVE-2020-7615
HistoryApr 07, 2020 - 1:14 p.m.

CVE-2020-7615

2020-04-0713:14:04
snyk
www.cve.org
4

EPSS

0.001

Percentile

22.9%

fsa through 0.5.1 is vulnerable to Command Injection. The first argument of ‘execGitCommand()’, located within ‘lib/rep.js#63’ can be controlled by users without any sanitization to inject arbitrary commands.

CNA Affected

[
  {
    "product": "fsa",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "All versions including 0.5.1"
      }
    ]
  }
]

EPSS

0.001

Percentile

22.9%

Related for CVELIST:CVE-2020-7615