push-dir through 0.4.1 allows execution of arbritary commands. Arguments provided as part of the variable "opt.branch" is not validated before being provided to the "git" command within "index.js#L139". This could be abused by an attacker to inject arbitrary commands.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: snyk
Published: 2020-02-28T20:35:28
Updated: 2024-08-04T22:32:02.167Z
Reserved: 2019-04-03T00:00:00
Link: CVE-2019-10803
Vulnrichment
No data.
NVD
Status : Modified
Published: 2020-02-28T21:15:13.010
Modified: 2024-11-21T04:19:57.080
Link: CVE-2019-10803
Redhat
No data.