Lucene search
GoogleOSV:GHSA-QJG4-W4C6-F6C6HistoryJun 18, 2020 - 7:23 p.m.
Command injection in mversion
2020-06-1819:23:17
Google
osv.dev
10
0.002 Low
EPSS
Percentile
60.7%
Impact
This issue may lead to remote code execution if a client of the library calls the vulnerable method with untrusted input.
Patches
Patched by version 2.0.0. Previous releases are deprecated in npm.
Workarounds
Make sure to escape git commit messages when using the commitMessage option for the update function.
Related
cvelist
cvelist
CVE-2020-4059 Command Injection in mversion
2020-06-18 19:25:15
github
github
Command injection in mversion
2020-06-18 19:23:17
githubexploit
githubexploit
Exploit for Command Injection in Mversion Project Mversion
2020-12-01 09:45:48
nvd
nvd
CVE-2020-4059
2020-06-18 20:15:10
cve
cve
CVE-2020-4059
2020-06-18 20:15:10
prion
prion
Command injection
2020-06-18 20:15:00
osv
osv
CVE-2020-4059
2020-06-18 20:15:10
veracode
veracode
OS Command Injection
2020-06-19 05:19:38