2 matches found
BIT-COMPOSER-2022-24828 Missing input validation can lead to command execution in composer
Composer is a dependency manager for the PHP programming language. Integrators using Composer code to call VcsDriver::getFileContent can have a code injection vulnerability if the user can control the $file or $identifier argument. This leads to a vulnerability on packagist.org for example where...
8.8CVSS8.6AI score0.01877EPSS
SaveExploits0References7
20