Lucene search

CVE-2024-35242

🗓️ 10 Jun 2024 22:09:15Reported by GoogleType

osv🔗 osv.dev👁 8 Views

Composer 2.x prior to 2.2.24 and 2.7.7 command injection vulnerabilit

Reporter	Title	Published	Views	Family All 39
Vulnrichment	CVE-2024-35242 Composer vulnerable to command injection via malicious git/hg branch names	10 Jun 202421:23	–	vulnrichment
Veracode	Command Injection	12 Jun 202407:14	–	veracode
Tenable Nessus	Amazon Linux 2023 : composer (ALAS2023-2024-659)	22 Jul 202400:00	–	nessus
Tenable Nessus	SUSE SLES15 / openSUSE 15 Security Update : php-composer2 (SUSE-SU-2024:2107-1)	21 Jun 202400:00	–	nessus
Tenable Nessus	Debian dsa-5715 : composer - security update	18 Jun 202400:00	–	nessus
Tenable Nessus	FreeBSD : Composer -- Multiple command injections via malicious git/hg branch names (5f608c68-276c-11ef-8caa-0897988a1c07)	11 Jun 202400:00	–	nessus
Tenable Nessus	Fedora 40 : composer (2024-9ed24c98cd)	19 Jun 202400:00	–	nessus
Tenable Nessus	Fedora 39 : composer (2024-bb55f8476a)	20 Jun 202400:00	–	nessus
Tenable Nessus	SUSE SLES15 / openSUSE 15 Security Update : php-composer2 (SUSE-SU-2024:2106-1)	21 Jun 202400:00	–	nessus
Tenable Nessus	Debian dla-3838 : composer - security update	20 Jun 202400:00	–	nessus

Source	Link
github	www.github.com/composer/composer/security/advisories/GHSA-v9qv-c7wm-wgmf
github	www.github.com/composer/composer/commit/6bd43dff859c597c09bd03a7e7d6443822d0a396
github	www.github.com/composer/composer/commit/fc57b93603d7d90b71ca8ec77b1c8a9171fdb467
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/PO4MU2BC7VR6LMHEX4X7DKGHVFXZV2MC/
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/VLPJHM2WWSYU2F6KHW2BYFGYL4IGTKHC/
security-tracker	www.security-tracker.debian.org/tracker/CVE-2024-35242

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

10 Jun 2024 22:15Current

7.5High risk

Vulners AI Score7.5

CVSS38.8

EPSS0.0004

SSVC