Описание
OS Command Injection in giting
giting version prior to 0.0.8 allows execution of arbritary commands. The first argument repo of function pull() is executed by the package without any validation.
Пакеты
Наименование
giting
npm
Затронутые версииВерсия исправления
<= 0.0.8
Отсутствует
Связанные уязвимости
CVSS3: 9.8
nvd
почти 6 лет назад
giting version prior to 0.0.8 allows execution of arbritary commands. The first argument "repo" of function "pull()" is executed by the package without any validation.