HOMEVULNERABILITIESVENDORSGit-php Project

Git-php ProjectCVEs & Vulnerabilities

1 CVEs affecting Git-php Project products, tracked from the National Vulnerability Database, with CVSS/EPSS scores and exploitation status.

1 CVEs→ All vendors

Most Affected Products

git-php 1
CVE-2022-25866CRITICAL

The package czproject/git-php before 4.0.3 are vulnerable to Command Injection via git argument injection. When calling the isRemoteUrlReadable($url, array $refs = NULL) function, both the url and refs parameters are passed to the git ls-remote subcommand in a way that additional flags can be set. The additional flags can be used to perform a command injection.

25 Apr 2022
9.8
CVSS
← PrevPage 1 / 1Next →
← All Vendors·CVE Database
Git-php Project CVEs & Vulnerabilities — 1 Tracked