CVE-2021-32673CWE-94

Remote Command Execution in reg-keygen-git-hash-plugin

High · published June 8, 2021

CVSS v3.1
8.8
EPSS
2%
Percentile
80.0
In the wild
Unconfirmed
What it is

reg-keygen-git-hash-plugin is a reg-suit plugin to detect the snapshot key to be compare with using Git commit hash. reg-keygen-git-hash-plugin through and including 0.10.15 allow remote attackers to execute of arbitrary commands. Upgrade to version 0.10.16 or later to resolve this issue.

The record
Technical detail
CVSS v3.1
8.8 · HIGH
Vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.01941 · 80.0th percentile
Weakness
CWE-94 · Improper Control of Generation of Code ('Code Injection')
Published
2021-06-08T17:00Z
EPSS history
Timeline
  • 08 JUN 17:00Z
    Remote Command Execution in reg-keygen-git-hash-plugin
    cvelistv5