CVE-2022-25860 in simple-gitinfo

Zusammenfassung

von MITRE • 26.01.2023

Versions of the package simple-git before 3.16.0 are vulnerable to Remote Code Execution (RCE) via the clone(), pull(), push() and listRemote() methods, due to improper input sanitization. This vulnerability exists due to an incomplete fix of [CVE-2022-25912](https://security.snyk.io/vuln/SNYK-JS-SIMPLEGIT-3112221).

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

Zuständig

Snyk

Reservieren

24.02.2022

Veröffentlichung

26.01.2023

Moderieren

akzeptiert

Eintrag

VDB-219608

CPE

bereit

EPSS

0.02712

KEV

nein

Aktivitäten

very low

Sektor

Hostingprovider

Quellen

MITREhttps://www.cve.org/CVERecord?id=CVE-2022-25860
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2022-25860
CVE Detailshttps://www.cvedetails.com/cve/CVE-2022-25860/

◂ ZurückÜbersichtWeiter ▸

Do you want to use VulDB in your project?

Use the official API to access entries easily!