Lucene search
GoogleOSV:GHSA-6QPR-9MC5-7GCHHistoryApr 12, 2021 - 7:50 p.m.
Command Injection in async-git
2021-04-1219:50:20
Google
osv.dev
12
command injection
async-git
shell meta-characters
vulnerability
software
EPSS
0.005
Percentile
76.3%
The package async-git before 1.13.2 are vulnerable to Command Injection via shell meta-characters (back-ticks). For example: git.reset('atouch HACKEDb')
Related
osv
osv
CVE-2020-28490
2021-02-18 15:15:13
github
github
Command Injection in async-git
2021-04-12 19:50:20
cvelist
cvelist
CVE-2020-28490 Command Injection
2021-02-18 14:20:14
veracode
veracode
Command Injection
2021-02-19 03:08:20
cve
cve
CVE-2020-28490
2021-02-18 15:15:13
prion
prion
Command injection
2021-02-18 15:15:00
nvd
nvd
CVE-2020-28490
2021-02-18 15:15:13