PT-2022-17576 · Czproject · Gitphp

Name of the Vulnerable Software and Affected Versions: czproject/git-php versions prior to 4.0.3 Description: The issue allows for Command Injection via git argument injection. When calling the isRemoteUrlReadable$url, array $refs = NULL function, both the url and refs parameters are passed to th...

Command Injection

Overview czproject/git-php is a Library for work with Git repository in PHP. Affected versions of this package are vulnerable to Command Injection via git argument injection. When calling the isRemoteUrlReadable$url, array $refs = NULL function, both the url and refs parameters are passed to the...