CVE-2018-7032

Name of the Vulnerable Software and Affected Versions myrepos versions through 1.20171231

Description The issue allows a malicious website operator or a Man-in-the-Middle (MitM) attacker to execute arbitrary code. This can be achieved by taking advantage of the fact that webcheckout in myrepos does not sanitize URLs passed to git clone. Demonstrated attacks include an "ext::sh -c" attack or an option injection attack.

Recommendations For versions through 1.20171231, update to a version that sanitizes URLs passed to git clone to prevent arbitrary code execution.