Kurz gesagt
- CVE-2017-1000451 ist eine Schwachstelle (HOCH (CVSS 7.8)) in fs-git (fs-git project), fs-git.
- Wahrscheinlichkeit einer Ausnutzung in den nächsten 30 Tagen (EPSS): 0.76%, höher als bei 55.5% aller Schwachstellen.
- Abhilfe: auf 1.0.2 oder neuer aktualisieren.
| Package | Affected versions | Patched versions |
|---|
| fs-git | ≤ 1.0.1
| No fix yet |
| fs-git npm | < 1.0.2
| 1.0.2
|
Description
fs-git is a file system like api for git repository. The fs-git version 1.0.1 module relies on child_process.exec, however, the buildCommand method used to construct exec strings does not properly sanitize data and is vulnerable to command injection across all methods that use it and call exec.
NVD description
fs-git is a file system like api for git repository. The fs-git version 1.0.1 module relies on child_process.exec, however, the buildCommand method used to construct exec strings does not properly sanitize data and is vulnerable to command injection across all methods that use it and call exec.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free