Lucene search
+L

2 matches found

OSV
OSV
•added 2024/03/06 10:51 a.m.•25 views

BIT-COMPOSER-2022-24828 Missing input validation can lead to command execution in composer

Composer is a dependency manager for the PHP programming language. Integrators using Composer code to call VcsDriver::getFileContent can have a code injection vulnerability if the user can control the $file or $identifier argument. This leads to a vulnerability on packagist.org for example where...

8.8CVSS8.6AI score0.01877EPSS
SaveExploits0References7
Rows per page
Query Builder