CVE-2021-23664

CVE-2021-23664 affects @isomorphic-git/cors-proxy before 2.7.1. The vulnerability is Server-side Request Forgery (SSRF) due to missing sanitization and validation of the redirection action in middleware.js. Exploitation details and public disclosures are present in connected advisories (GHSA/Snyk...

CVE-2021-23664

The package @isomorphic-git/cors-proxy before 2.7.1 are vulnerable to Server-side Request Forgery SSRF due to missing sanitization and validation of the redirection action in middleware.js...

isomorphic-git 代码问题漏洞

isomorphic-git is a pure JavaScript implementation of open source git for node and browser environments including WebWorkers and ServiceWorkers. A security vulnerability exists in isomorphic-git cors-proxy versions prior to 2.7.1, which stems from a lack of cleanup and validation of redirect...

CVE-2021-23664: Server-Side Request Forgery (SSRF)

The package @isomorphic-git/cors-proxy before 2.7.1 are vulnerable to Server-side Request Forgery SSRF due to missing sanitization and validation of the redirection action in middleware.js...

PT-2022-9422

Name of the Vulnerable Software and Affected Versions @isomorphic-git/cors-proxy versions prior to 2.7.1 Description The issue is related to Server-side Request Forgery SSRF due to missing sanitization and validation of the redirection action in middleware.js. This allows for potential...

Server-side Request Forgery (SSRF)

Overview @isomorphic-git/cors-proxy is a Proxy clone and push requests for the browser Affected versions of this package are vulnerable to Server-side Request Forgery SSRF due to missing sanitization and validation of the redirection action in middleware.js. PoC GET...

Directory Traversal in isomorphic-git

isomorphic-git before 1.8.2 allows Directory Traversal via a crafted repository...

@adobe/git-server (>=1.3.6, <=1.3.18), @adobe/helix-cli (>=8.1.0, <=13.4.15) +12 more potentially affected by CVE-2021-30483 via isomorphic-git (>=1.1.4, <=1.8.1)

isomorphic-git NPM version =1.1.4, =1.3.6, =8.1.0, =1.0.0, =5.1.1, =2.9.0, =1.0.24, =2.4.1, =1.2.0, =0.1.0, =4.0.1-next.443, =2.3.1-beta.0, =2.10.4, =1.0.0, =1.0.1 Source cves: CVE-2021-30483 Source advisory: OSV:GHSA-FGXQ-P49F-QW99...

GHSA-FGXQ-P49F-QW99 Directory Traversal in isomorphic-git

isomorphic-git before 1.8.2 allows Directory Traversal via a crafted repository...

isomorphic-git path traversal vulnerability

isomorphic-git is a pure JavaScript implementation of open source git for node and browser environments including WebWorkers and ServiceWorkers. isomorphic-git is vulnerable to path traversal prior to 1.8.2, which stems from the fact that isomorphic-git allows directory traversal via carefully...

CVE-2021-30483

A flaw was found in isomorphic-git. An attacker could cause a Directory Traversal via a crafted filepath in a repository being cloned...

CVE-2021-30483

isomorphic-git before 1.8.2 allows Directory Traversal via a crafted repository...

CVE-2021-30483

isomorphic-git before 1.8.2 allows Directory Traversal via a crafted repository...

Directory traversal

isomorphic-git before 1.8.2 allows Directory Traversal via a crafted repository...

CVE-2021-30483

isomorphic-git before 1.8.2 allows Directory Traversal via a crafted repository...

isomorphic-git 路径遍历漏洞

isomorphic-git is a pure JavaScript implementation of open source git for node and browser environments including WebWorkers and ServiceWorkers. isomorphic-git is vulnerable to path traversal prior to 1.8.2, which stems from the fact that isomorphic-git allows directory traversal via carefully...

CVE-2021-30483

isomorphic-git before 1.8.2 allows Directory Traversal via a crafted repository...

CVE-2021-30483

isomorphic-git before 1.8.2 allows Directory Traversal via a crafted repository...

CVE-2021-30483

CVE-2021-30483 affects isomorphic-git prior to 1.8.2 and is described as a Directory Traversal via a crafted repository. The primary technical detail available: the vulnerability exists in isomorphic-git’s handling of repository data, enabling directory traversal. The effect is implied as path tr...

PT-2021-18755

Name of the Vulnerable Software and Affected Versions isomorphic-git versions prior to 1.8.2 Description The issue allows Directory Traversal via a crafted repository. Recommendations For versions prior to 1.8.2, update to version 1.8.2 or later to resolve the issue...