OS command injection in git-diff-apply

2020-02-14T23:09:24
ID GHSA-84CM-V6JP-GJMR
Type github
Reporter GitHub Advisory Database
Modified 2020-02-14T23:09:24

Description

In "index.js" file line 240, the run command executes the git command with a user controlled variable called remoteUrl. This affects git-diff-apply all versions prior to 0.22.2.