CVE-2018-3785

2018-08-1713:29:00

Google

osv.dev

7.5 High

AI Score

Confidence

High

0.005 Low

EPSS

Percentile

75.9%

JSON

A command injection in git-dummy-commit v1.3.0 allows os level commands to be executed due to an unescaped parameter.

CPENameOperatorVersion
git-dummy-commiteq1.3.0
git-dummy-commiteq1.1.1
git-dummy-commiteq1.2.0
git-dummy-commiteq1.1.0
git-dummy-commiteq1.0.0
git-dummy-commiteq1.2.1

Name	Operator	Version
git-dummy-commit	eq	1.3.0
git-dummy-commit	eq	1.1.1
git-dummy-commit	eq	1.2.0
git-dummy-commit	eq	1.1.0
git-dummy-commit	eq	1.0.0
git-dummy-commit	eq	1.2.1

References

hackerone.com/reports/341710