Логотип exploitDog
bind:CVE-2019-10803
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2019-10803

Количество 2

Количество 2

nvd логотип

CVE-2019-10803

почти 6 лет назад

push-dir through 0.4.1 allows execution of arbritary commands. Arguments provided as part of the variable "opt.branch" is not validated before being provided to the "git" command within "index.js#L139". This could be abused by an attacker to inject arbitrary commands.

CVSS3: 9.8
EPSS: Низкий
github логотип

GHSA-926x-m6m5-3mmp

почти 4 года назад

push-dir Enables OS Command Injection

CVSS3: 9.8
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
nvd логотип
CVE-2019-10803

push-dir through 0.4.1 allows execution of arbritary commands. Arguments provided as part of the variable "opt.branch" is not validated before being provided to the "git" command within "index.js#L139". This could be abused by an attacker to inject arbitrary commands.

CVSS3: 9.8
1%
Низкий
почти 6 лет назад
github логотип
GHSA-926x-m6m5-3mmp

push-dir Enables OS Command Injection

CVSS3: 9.8
1%
Низкий
почти 4 года назад

Уязвимостей на страницу