CVE-2019-10803
28.02.2020, 21:15
push-dir through 0.4.1 allows execution of arbritary commands. Arguments provided as part of the variable "opt.branch" is not validated before being provided to the "git" command within "index.js#L139". This could be abused by an attacker to inject arbitrary commands.
| Vendor | Product | Version |
|---|---|---|
| push-dir_project | push-dir | 𝑥 ≤ 0.4.1 |
𝑥
= Vulnerable software versions