CVE-2022-25912

8.1

HIGHCVSS v3

Published

December 6, 2022

Affected

2 projects

Assigned by

[email protected]

Severity scale

010

Description

The package simple-git before 3.15.0 are vulnerable to Remote Code Execution (RCE) when enabling the ext transport protocol, which makes it exploitable via clone() method. This vulnerability exists due to an incomplete fix of [CVE-2022-24066](https://security.snyk.io/vuln/SNYK-JS-SIMPLEGIT-2434306).

simple-git

NPMSimple GIT interface for node.js

< 3.15.0NVD

steveukx/git-js

GitHubA light weight interface for running git commands in any node.js application.

NVD

More on this CVE

NVD↗GitHub Advisory↗

Security Advisories

CVE-2022-25912

Description

More on this CVE