Lucene search

Composer has multiple command injections via malicious git/hg branch names

🗓️ 10 Jun 2024 21:25:36Reported by GoogleType

osv🔗 osv.dev👁 11 Views

Composer command injection via malicious branch name

Reporter	Title	Published	Views	Family All 39
Vulnrichment	CVE-2024-35242 Composer vulnerable to command injection via malicious git/hg branch names	10 Jun 202421:23	–	vulnrichment
Debian CVE	CVE-2024-35242	10 Jun 202422:15	–	debiancve
Cvelist	CVE-2024-35242 Composer vulnerable to command injection via malicious git/hg branch names	10 Jun 202421:23	–	cvelist
OSV	CGA-cf8c-xqvc-jhcx	12 Jun 202408:05	–	osv
OSV	BIT-composer-2024-35242	12 Jun 202407:16	–	osv
OSV	CVE-2024-35242	10 Jun 202422:15	–	osv
OSV	composer - security update	19 Jun 202400:00	–	osv
OSV	php-composer2-2.7.7-1.1 on GA media	15 Jun 202400:00	–	osv
OSV	composer - security update	18 Jun 202400:00	–	osv
OSV	Security update for php-composer2	20 Jun 202415:33	–	osv

Source	Link
github	www.github.com/composer/composer/security/advisories/GHSA-v9qv-c7wm-wgmf
nvd	www.nvd.nist.gov/vuln/detail/CVE-2024-35242
github	www.github.com/composer/composer/commit/6bd43dff859c597c09bd03a7e7d6443822d0a396
github	www.github.com/composer/composer/commit/fc57b93603d7d90b71ca8ec77b1c8a9171fdb467
github	www.github.com/composer/composer
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/PO4MU2BC7VR6LMHEX4X7DKGHVFXZV2MC
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/VLPJHM2WWSYU2F6KHW2BYFGYL4IGTKHC

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

10 Jun 2024 21:36Current

7.2High risk

Vulners AI Score7.2

CVSS38.8

EPSS0.0004

SSVC