Lucene search
GoogleOSV:GHSA-MF6W-45CF-QHMPHistoryAug 15, 2018 - 8:04 p.m.
Git-fastclone passes user modifiable strings directly to a shell command
2018-08-1520:04:44
Google
osv.dev
10
EPSS
0.034
Percentile
91.4%
git-fastclone before 1.0.5 passes user modifiable strings directly to a shell command. An attacker can execute malicious commands by modifying the strings that are passed as arguments to cd and git clone commands in the library.
Related
prion
prion
Command injection
2016-11-03 10:59:00
cvelist
cvelist
CVE-2015-8969
2016-11-03 10:00:00
hackerone
hackerone
github
github
Git-fastclone passes user modifiable strings directly to a shell command
2018-08-15 20:04:44
rubygems
rubygems
git-fastclone Shell Metacharacter Injection Arbitrary Command Execution
2015-12-14 21:00:00
nvd
nvd
CVE-2015-8969
2016-11-03 10:59:01
cve
cve
CVE-2015-8969
2016-11-03 10:59:01