Remote Code Execution (RCE)

gity is vulnerable to remote code execution RCE. A remote attacker is able to execute malicious code because user input command are not sanitized and directly executed...

Remote Code Execution (RCE)

gity is vulnerable to remote code execution RCE. A remote attacker is able to execute malicious code because user input command is not sanitized and directly executed...

Node.js third-party modules: [gity] RCE via insecure command formatting

I would like to report a RCE issue in the gity module. It allows to execute arbitrary commands remotely inside the victim's PC Module module name: gity version: 1.0.5 npm page: https://www.npmjs.com/package/gity Module Description A nice Git wrapper for Node. Module Stats 3/4 downloads in the las...