Lucene search
Veracode Vulnerability DatabaseVERACODE:22260HistoryJan 08, 2020 - 4:23 a.m.
OS Command Injection
2020-01-0804:23:03
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
9
EPSS
0.006
Percentile
77.7%
git-diff-apply is vulnerable to OS command injection. Lack of validation and sanitization of the remoteUrl parameter allows an attacker to inject arbitrary OS command via the affected parameter that is subsequently used in utils.run as a git command.
Related
osv
osv
CVE-2019-10776
2020-01-07 19:15:10
OS command injection in git-diff-apply
2020-02-14 23:09:24
Command Injection in standard-version
2020-07-13 21:34:59
cvelist
cvelist
CVE-2019-10776
2020-01-07 18:27:13
githubexploit
githubexploit
Exploit for OS Command Injection in Git-Diff-Apply Project Git-Diff-Apply
2020-12-01 09:18:57
nvd
nvd
CVE-2019-10776
2020-01-07 19:15:10
github
github
OS command injection in git-diff-apply
2020-02-14 23:09:24
Command Injection in standard-version
2020-07-13 21:34:59
cve
cve
CVE-2019-10776
2020-01-07 19:15:10
prion
prion
Command injection
2020-01-07 19:15:00