4 matches found
WS-2020-0089
gitting through 0.0.8 are vulnerable to Command Injection. The package fails to sanitize input and passes it directly to an exec call, which may allow attackers to execute arbitrary code in the system. The pull function is vulnerable through the branch variable...
GHSA-7R9X-HR76-JR96 Command Injection in giting
All versions of gitting are vulnerable to Command Injection. The package fails to sanitize input and passes it directly to an exec call, which may allow attackers to execute arbitrary code in the system. The pull function is vulnerable through the branch variable. Recommendation No fix is current...
Command Injection in giting
All versions of gitting are vulnerable to Command Injection. The package fails to sanitize input and passes it directly to an exec call, which may allow attackers to execute arbitrary code in the system. The pull function is vulnerable through the branch variable. Recommendation No fix is current...
PT-2020-21132
Name of the Vulnerable Software and Affected Versions gitting versions affected versions not specified Description The issue concerns a Command Injection problem. The package fails to sanitize input, passing it directly to an exec call, which may allow attackers to execute arbitrary code in the...