Lucene search

K
osvGoogleOSV:CVE-2020-28490
HistoryFeb 18, 2021 - 3:15 p.m.

CVE-2020-28490

2021-02-1815:15:13
Google
osv.dev
7
async-git
version 1.13.2
command injection
shell meta-characters
vulnerability

AI Score

7.2

Confidence

High

EPSS

0.005

Percentile

76.3%

The package async-git before 1.13.2 are vulnerable to Command Injection via shell meta-characters (back-ticks). For example: git.reset(‘atouch HACKEDb’)

AI Score

7.2

Confidence

High

EPSS

0.005

Percentile

76.3%

Related for OSV:CVE-2020-28490