Beveiligingsadvies

CVE-2022-21235

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2022-04-01 15:55:10

Laatst bijgewerkt 2024-09-17 00:20:56

Toegewezen door snyk

CVSS-score 8.1

Status PUBLISHED

Beschrijving

The package github.com/masterminds/vcs before 1.13.3 are vulnerable to Command Injection via argument injection. When hg is executed, argument strings are passed to hg in a way that additional flags can be set. The additional flags can be used to perform a command injection.

← Alle CVE's bekijken Bekijk op cve.org ↗