Lucene search
PRIOn knowledge basePRION:CVE-2022-21223HistoryApr 01, 2022 - 6:15 p.m.
Command injection
2022-04-0118:15:00
PRIOn knowledge base
www.prio-n.com
2
The package cocoapods-downloader before 1.6.2 are vulnerable to Command Injection via hg argument injection. When calling the download function (when using hg), the url (and/or revision, tag, branch) is passed to the hg clone command in a way that additional flags can be set. The additional flags can be used to perform a command injection.
| CPE | Name | Operator | Version |
|---|---|---|---|
| cocoapods-downloader | lt | 1.6.2 |
Related
cve
cve
CVE-2022-21223
2022-04-01 18:15:08
cvelist
cvelist
CVE-2022-21223 Command Injection
2022-04-01 00:00:00
osv
osv
CVE-2022-21223
2022-04-01 18:15:08
Command injection in cocoapods-downloader
2022-04-02 00:00:13
nvd
nvd
CVE-2022-21223
2022-04-01 18:15:08
github
github
Command injection in cocoapods-downloader
2022-04-02 00:00:13
ibm
ibm