Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
veracodeVeracode Vulnerability DatabaseVERACODE:39509
HistoryMar 03, 2023 - 9:45 p.m.

Command Injection

2023-03-0321:45:07
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
9
command injection
vulnerability
user-input sanitization
getgittagsremote
arbitrary commands
software

0.0004 Low

EPSS

Percentile

15.9%

JSON

jtrussell/semver-tags is vulnerable to Command Injection The vulnerability exists due to improper user-input sanitization in the getGitTagsRemote function, which allows an attacker to execute arbitrary commands.

CPENameOperatorVersion
semver-tagsle0.4.10
semver-tagsle0.4.10

Related

nvd 1
cve 1
osv 1
redhatcve 1
prion 1
cvelist 1
github 1
nvd
nvd
CVE-2022-25853
2023-02-06 05:15:11
cve
cve
CVE-2022-25853
2023-02-06 05:15:11
osv
osv
semver-tags is vulnerable to Command Injection via the getGitTagsRemote function
2023-02-06 06:30:25
redhatcve
redhatcve
CVE-2022-25853
2023-02-07 04:26:28
prion
prion
Command injection
2023-02-06 05:15:00
cvelist
cvelist
CVE-2022-25853
2023-02-06 05:00:01
github
github
semver-tags is vulnerable to Command Injection via the getGitTagsRemote function
2023-02-06 06:30:25

0.0004 Low

EPSS

Percentile

15.9%

JSON
Related for VERACODE:39509
nvd1cve1osv1redhatcve1prion1cvelist1github1