Lucene search
Veracode Vulnerability DatabaseVERACODE:35366HistoryMay 04, 2022 - 3:05 p.m.
Command Injection
2022-05-0415:05:29
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
15
0.002 Low
EPSS
Percentile
52.1%
git-pull-or-clone is vulnerable to command injection. A remote attacker is able to inject malicious command-line arguments to be executed on the OS through the gitClone function via the --upload-pack feature of git.
| CPE | Name | Operator | Version |
|---|---|---|---|
| git-pull-or-clone | le | 2.0.1 | |
| git-pull-or-clone | le | 2.0.1 |
Related
prion
prion
Command injection
2022-05-01 16:15:00
nvd
nvd
CVE-2022-24437
2022-05-01 16:15:08
github
github
OS Command Injection in git-pull-or-clone
2022-05-03 00:00:46
cvelist
cvelist
CVE-2022-24437 Command Injection
2022-05-01 00:00:00
cve
cve
CVE-2022-24437
2022-05-01 16:15:08
osv
osv
CVE-2022-24437
2022-05-01 16:15:08
OS Command Injection in git-pull-or-clone
2022-05-03 00:00:46