Lucene search
PRIOn knowledge basePRION:CVE-2023-26134HistoryJun 28, 2023 - 5:15 a.m.
Command injection
2023-06-2805:15:00
PRIOn knowledge base
www.prio-n.com
5
git-commit-info
command injection
version 2.0.2
Versions of the package git-commit-info before 2.0.2 are vulnerable to Command Injection such that the package-exported method gitCommitInfo () fails to sanitize its parameter commit, which later flows into a sensitive command execution API. As a result, attackers may inject malicious commands once they control the hash content.
| CPE | Name | Operator | Version |
|---|---|---|---|
| git-commit-info | lt | 2.0.2 |
Related
nvd
nvd
CVE-2023-26134
2023-06-28 05:15:10
veracode
veracode
Command Injection
2023-07-12 11:18:57
osv
osv
git-commit-info vulnerable to Command Injection
2023-06-28 06:30:22
CVE-2023-26134
2023-06-28 05:15:10
github
github
git-commit-info vulnerable to Command Injection
2023-06-28 06:30:22
cve
cve
CVE-2023-26134
2023-06-28 05:15:10
cvelist
cvelist
CVE-2023-26134
2023-06-28 05:00:01