In breve
- CVE-2022-25860 è una vulnerabilità CRITICO (CVSS 9.8) che riguarda simple-git (simple-git project), simple-git.
- Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 2.7%, superiore al 86.0% delle vulnerabilità.
- Correzione: aggiornare a 3.16.0 o successiva.
Description
Versions of the package simple-git before 3.16.0 are vulnerable to Remote Code Execution (RCE) via the clone(), pull(), push() and listRemote() methods, due to improper input sanitization. This vulnerability exists due to an incomplete fix of CVE-2022-25912.
NVD description
Versions of the package simple-git before 3.16.0 are vulnerable to Remote Code Execution (RCE) via the clone(), pull(), push() and listRemote() methods, due to improper input sanitization.
This vulnerability exists due to an incomplete fix of [CVE-2022-25912](https://security.snyk.io/vuln/SNYK-JS-SIMPLEGIT-3112221).
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free