OS Command Injection in fsa
Moderate severity
GitHub Reviewed
Published
Dec 9, 2021
to the GitHub Advisory Database
•
Updated Feb 1, 2023
Description
Published by the National Vulnerability Database
Apr 7, 2020
Reviewed
May 25, 2021
Published to the GitHub Advisory Database
Dec 9, 2021
Last updated
Feb 1, 2023
fsa through 0.5.1 is vulnerable to Command Injection. The first argument of 'execGitCommand()', located within 'lib/rep.js#63' can be controlled by users without any sanitization to inject arbitrary commands.
References