L33T-KR3W/push-dir

L33T-KR3W/push-dir

GitHubGitHub
GitHubgithub.com
Releases8
Frequency1 month 1 week
Last Release
Stars264
👉📁 Push the contents of a directory to a remote branch
Log in to subscribe

CVE History

CVEPublishedCVSS v3CVSS v2
CVE-2019-10803↗
9.8 CRITICAL7.5 HIGH

push-dir through 0.4.1 allows execution of arbritary commands. Arguments provided as part of the variable "opt.branch" is not validated before being provided to the "git" command within "index.js#L139". This could be abused by an attacker to inject arbitrary commands.