Security Advisory

CVE-2019-5485

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2019-09-13 17:30:53
Last updated 2024-08-04 19:54:53
Assigner hackerone
CVSS score not scored
State PUBLISHED

Description

NPM package gitlabhook version 0.0.17 is vulnerable to a Command Injection vulnerability. Arbitrary commands can be injected through the repository name.