fsa through 0.5.1 is vulnerable to Command Injection
published April 7, 2020
CVSS
—
EPSS
1%
Percentile
66.3
In the wild
Unconfirmed
What it is
fsa through 0.5.1 is vulnerable to Command Injection. The first argument of 'execGitCommand()', located within 'lib/rep.js#63' can be controlled by users without any sanitization to inject arbitrary commands.
The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01139 · 66.3th percentile
Published
2020-04-07T13:14Z
EPSS history
Timeline
07 APR 13:14Z
fsa through 0.5.1 is vulnerable to Command Injection