Lucene search
Veracode Vulnerability DatabaseVERACODE:29440HistoryFeb 19, 2021 - 3:08 a.m.
Command Injection
2021-02-1903:08:20
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
11
command injection
os command
system shell
index.js file
software
EPSS
0.005
Percentile
76.3%
async-git is vulnerable to command injection. An attacker is able to inject malicious OS command to the system shell via the getter function in the index.js file.
Related
osv
osv
CVE-2020-28490
2021-02-18 15:15:13
Command Injection in async-git
2021-04-12 19:50:20
github
github
Command Injection in async-git
2021-04-12 19:50:20
cvelist
cvelist
CVE-2020-28490 Command Injection
2021-02-18 14:20:14
cve
cve
CVE-2020-28490
2021-02-18 15:15:13
prion
prion
Command injection
2021-02-18 15:15:00
nvd
nvd
CVE-2020-28490
2021-02-18 15:15:13