EUVD-2021-2432

Malware in sbrugna...

GHSA-3P94-VJ97-FM4Q OS Command Injection in fsa

fsa through 0.5.1 is vulnerable to Command Injection. The first argument of 'execGitCommand', located within 'lib/rep.js63' can be controlled by users without any sanitization to inject arbitrary commands...

OS Command Injection

fsa is vulnerable to OS Command Injection. The vulnerability exists as the first argument of execGitCommand is not sanitized and is subsequently run by exec...

fsa OS Command Injection Vulnerability

fsa is a file system auditing software package. An operating system command injection vulnerability exists in the first parameter of the 'execGitCommand' function in the lib/rep.js file in fsa 0.5.1 and earlier versions. An attacker can exploit this vulnerability to inject arbitrary commands...

CVE-2020-7615

fsa through 0.5.1 is vulnerable to Command Injection. The first argument of 'execGitCommand', located within 'lib/rep.js63' can be controlled by users without any sanitization to inject arbitrary commands...

CVE-2020-7615

fsa through 0.5.1 is vulnerable to Command Injection. The first argument of 'execGitCommand', located within 'lib/rep.js63' can be controlled by users without any sanitization to inject arbitrary commands...

Command injection

fsa through 0.5.1 is vulnerable to Command Injection. The first argument of 'execGitCommand', located within 'lib/rep.js63' can be controlled by users without any sanitization to inject arbitrary commands...

CVE-2020-7615

fsa through 0.5.1 is vulnerable to Command Injection. The first argument of 'execGitCommand', located within 'lib/rep.js63' can be controlled by users without any sanitization to inject arbitrary commands...

CVE-2020-7615

The CVE-2020-7615 entry concerns fsa (File system auditor) up to version 0.5.1. Connected sources provide concrete details: the vulnerability is an OS command injection in the first argument to execGitCommand() located in lib/rep.js (line 63). An attacker can supply unsanitized input to inject ar...

Command Injection

Overview fsa is a File system auditor. Affected versions of this package are vulnerable to Command Injection. The first argument of execGitCommand, located within lib/rep.js63 can be controlled by users without any sanitization to inject arbitrary commands. PoC var root = require"fsa"; var...