PT-2022-10315
CVE-2021-34081
·
تاريخ النشر
2022-06-01
·
تاريخ التحديث
2022-06-09
الوصف من
CVSS 2.0
9.3
عاليةالمقاييسAV:N/AC:M/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions
gitsome versions prior to 0.3.0, specifically versions through 0.2.3
Description
The issue allows attackers to execute arbitrary commands via a crafted tag name of the target git repository. This is an OS Command Injection vulnerability.
Recommendations
For versions through 0.2.3, update to version 0.3.0 or later to resolve the issue.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾