CVE-2016-7794

2017-01-1920:59:00

Google

osv.dev

7.9 High

AI Score

Confidence

High

0.023 Low

EPSS

Percentile

89.9%

JSON

sociomantic-tsunami git-hub before 0.10.3 allows remote attackers to execute arbitrary code via a crafted repository name.

CPENameOperatorVersion
git-hubeq0.7.0
git-hubeq0.2
git-hubeq0.8.0
git-hubeq0.5rc2
git-hubeq0.9.0
git-hubeq0.6.0
git-hubeq0.10.1
git-hubeq0.4rc2
git-hubeq0.3
git-hubeq0.10-rc1

Name	Operator	Version
git-hub	eq	0.7.0
git-hub	eq	0.2
git-hub	eq	0.8.0
git-hub	eq	0.5rc2
git-hub	eq	0.9.0
git-hub	eq	0.6.0
git-hub	eq	0.10.1
git-hub	eq	0.4rc2
git-hub	eq	0.3
git-hub	eq	0.10-rc1

Rows per page:

1-10 of 221

References

www.openwall.com/lists/oss-security/2016/09/30/2

www.securityfocus.com/bid/93249

github.com/sociomantic-tsunami/git-hub/issues/197