Security Advisory

CVE-2019-10802

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2020-02-28 20:42:09
Last updated 2024-08-04 22:32:01
Assigner snyk
State PUBLISHED

Description

giting version prior to 0.0.8 allows execution of arbritary commands. The first argument "repo" of function "pull()" is executed by the package without any validation.