Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

  1. Reconshell
  2. Vulnerabilities (CVE)
Filtered by vendor Push-dir Project Subscribe
Filtered by product Push-dir
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2019-10803 1 Push-dir Project 1 Push-dir 2020-03-03 7.5 HIGH 9.8 CRITICAL
push-dir through 0.4.1 allows execution of arbritary commands. Arguments provided as part of the variable "opt.branch" is not validated before being provided to the "git" command within "index.js#L139". This could be abused by an attacker to inject arbitrary commands.