Lucene search
Veracode Vulnerability DatabaseVERACODE:27893HistoryNov 16, 2020 - 4:10 a.m.
Remote Code Execution
2020-11-1604:10:59
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
7
0.014 Low
EPSS
Percentile
86.4%
dependabot-common is vulnerable to remote code execution. An attacker is able to inject arbitrary Shell commands via a branch name URL during cloning of the source repository.
| CPE | Name | Operator | Version |
|---|---|---|---|
| dependabot-common | le | 0.125.0 |
Related
osv
osv
Remote code execution in dependabot-core branch names when cloning
2020-11-13 15:47:50
CVE-2020-26222
2020-11-13 16:15:18
nvd
nvd
CVE-2020-26222
2020-11-13 16:15:18
prion
prion
Remote code execution
2020-11-13 16:15:00
github
github
Remote code execution in dependabot-core branch names when cloning
2020-11-13 15:47:50
cve
cve
CVE-2020-26222
2020-11-13 16:15:18
cvelist
cvelist
CVE-2020-26222 Remote code execution in dependabot-core
2020-11-13 16:00:20