HOMEVULNERABILITIESVENDORSPush-dir Project

Push-dir ProjectCVEs & Vulnerabilities

1 CVEs affecting Push-dir Project products, tracked from the National Vulnerability Database, with CVSS/EPSS scores and exploitation status.

1 CVEs→ All vendors

Most Affected Products

push-dir 1
CVE-2019-10803CRITICAL

push-dir through 0.4.1 allows execution of arbritary commands. Arguments provided as part of the variable "opt.branch" is not validated before being provided to the "git" command within "index.js#L139". This could be abused by an attacker to inject arbitrary commands.

29 Feb 2020
9.8
CVSS
← PrevPage 1 / 1Next →
← All Vendors·CVE Database
Push-dir Project CVEs & Vulnerabilities — 1 Tracked