Lucene search
GoogleOSV:GHSA-CHJ3-F7XW-367MHistoryJun 11, 2022 - 12:00 a.m.
OS Command Injection in git-promise
2022-06-1100:00:18
Google
osv.dev
8
0.009 Low
EPSS
Percentile
82.4%
All versions of package git-promise is vulnerable to Command Injection due to an inappropriate fix of a prior vulnerability in this package. Note: Please note that the vulnerability will not be fixed. The README file was updated with a warning regarding this issue.
Credits
@lirantal for discovering this vulnerability.
| CPE | Name | Operator | Version |
|---|---|---|---|
| git-promise | le | 1.0.0 |
Related
cve
cve
CVE-2022-24376
2022-06-10 20:15:08
nvd
nvd
CVE-2022-24376
2022-06-10 20:15:08
github
github
OS Command Injection in git-promise
2022-06-11 00:00:18
veracode
veracode
Command Injection
2022-06-13 08:18:31
prion
prion
Command injection
2022-06-10 20:15:00
cvelist
cvelist
CVE-2022-24376 Command Injection
2022-06-10 00:00:00