Lucene search
Veracode Vulnerability DatabaseVERACODE:34555HistoryMar 07, 2022 - 2:39 p.m.
Command Injection
2022-03-0714:39:59
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
7
0.0004 Low
EPSS
Percentile
12.6%
Weblate is vulnerable to command injection. The vulnerability exists in _clone and get_remote_branch functions in mercurial.py and git.py respectively because some arguments are not sanitize which allows an attacker to inject and execute arbitrary commands.
Related
cvelist
cvelist
CVE-2022-24727
2022-03-04 16:45:12
github
github
Command injection in Weblate
2022-03-05 00:00:44
osv
osv
Improper Neutralization of Special Elements used in a Command ('Command Injection') in Weblate
2022-03-04 21:15:31
PYSEC-2022-162
2022-03-04 17:15:00
Command injection in Weblate
2022-03-05 00:00:44
nvd
nvd
CVE-2022-24727
2022-03-04 17:15:07
cve
cve
CVE-2022-24727
2022-03-04 17:15:07