Lucene search
+L

4 matches found

osv_ghsa
osv_ghsa
•added 2020/09/04 5:26 p.m.•22 views

GHSA-7R9X-HR76-JR96 Command Injection in giting

All versions of gitting are vulnerable to Command Injection. The package fails to sanitize input and passes it directly to an exec call, which may allow attackers to execute arbitrary code in the system. The pull function is vulnerable through the branch variable. Recommendation No fix is current...

8AI score
SaveExploits0References1
Github Security Blog
Github Security Blog
•added 2020/09/04 5:26 p.m.•40 views

Command Injection in giting

All versions of gitting are vulnerable to Command Injection. The package fails to sanitize input and passes it directly to an exec call, which may allow attackers to execute arbitrary code in the system. The pull function is vulnerable through the branch variable. Recommendation No fix is current...

6.8AI score
SaveExploits0References2Affected Software1
Positive Technologies
Positive Technologies
•added 2020/09/04 12:00 a.m.•2 views

PT-2020-21132

Name of the Vulnerable Software and Affected Versions gitting versions affected versions not specified Description The issue concerns a Command Injection problem. The package fails to sanitize input, passing it directly to an exec call, which may allow attackers to execute arbitrary code in the...

6.5AI score
SaveExploits0References2
nodejs
nodejs
•added 2019/12/26 7:59 p.m.•27 views

Command Injection

Overview All versions of gitting are vulnerable to Command Injection. The package fails to sanitize input and passes it directly to an exec call, which may allow attackers to execute arbitrary code in the system. The pull function is vulnerable through the branch variable. Recommendation No fix i...

7.8AI score
SaveExploits0Affected Software1
Rows per page
Query Builder