| Package | Affected versions | Patched versions |
|---|---|---|
| cvs | = 1.12.1= 1.12.10= 1.12.11= 1.12.12= 1.12.13= 1.12.3= 1.12.5= 1.12.6= 1.12.7= 1.12.9 |
CVS 1.12.x, when configured to use SSH for remote repositories, might allow remote attackers to execute arbitrary code via a repository URL with a crafted hostname, as demonstrated by "-oProxyCommand=id;localhost:/bar."
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free