git-add-remote command injection vulnerability

git-add-remote is a package for adding Git remote repositories. An injection vulnerability exists in git-add-remote 1.0.0 and earlier versions, which stems from a lack of proper validation of user input. A remote attacker can exploit this vulnerability by sending a specially crafted 'name'...

CVE-2020-7630

git-add-remote through 1.0.0 is vulnerable to Command Injection. It allows execution of arbitrary commands via the name argument...

CVE-2020-7630

git-add-remote through 1.0.0 is vulnerable to Command Injection. It allows execution of arbitrary commands via the name argument...

CVE-2020-7630

git-add-remote through 1.0.0 is vulnerable to Command Injection. It allows execution of arbitrary commands via the name argument...

CVE-2020-7630

The CVE-2020-7630 entry concerns git-add-remote up to version 1.0.0 with a command-injection flaw: an attacker can execute arbitrary commands via the name argument. The connected sources corroborate the RCE potential but provide no remediation or patch details in the supplied documents.

CVE-2020-7630

git-add-remote through 1.0.0 is vulnerable to Command Injection. It allows execution of arbitrary commands via the name argument...

Command Injection

Overview git-add-remote is an API for adding git remotes. Affected versions of this package are vulnerable to Command Injection. The argument name can be controlled by users without any sanitization. PoC var root = require"git-add-remote"; var payload = "& touch Song"; rootpayload,'',function;...

generate-gh-repo (1.1.0), generate-project (>=0.7.0, <=1.0.0) +1 more potentially affected by CVE-2020-7630 via git-add-remote (1.0.0)

git-add-remote NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on git-add-remote and may be impacted: - generate-gh-repo 1.1.0 - generate-project =0.7.0, =1.0.4, =1.0.6 Source cves: CVE-2020-7630 Source advisory: SNYK:JS-GITADDREMOTE-564...

PT-2020-19666

Name of the Vulnerable Software and Affected Versions git-add-remote versions 1.0.0 and earlier Description The issue allows for Command Injection, enabling the execution of arbitrary commands via the name argument. Recommendations For git-add-remote version 1.0.0 and earlier, consider restrictin...

CVE-2020-7630: Improper Neutralization of Special Elements used in an OS Command

git-add-remote through 1.0.0 is vulnerable to Command Injection. It allows execution of arbitrary commands via the name argument...

git fixup: --amend for older commits

Everyone knows and loves to use git commit --amend to change the latest commit. But what if you want to correct a older commit? The flow in that case involves an interactive rebase with a edit step. But that's kludgy. Here's an alias that using a couple of nifty git features makes it one command...