Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
osvGoogleOSV:GHSA-69P6-WVMQ-27GG
HistoryApr 20, 2022 - 12:00 a.m.

Command injection in ruby-git

2022-04-2000:00:33
Google
osv.dev
10

0.002 Low

EPSS

Percentile

55.7%

JSON

The package prior to v1.11.0 is vulnerable to Command Injection via git argument injection. When calling the fetch(remote = 'origin', opts = {}) function, the remote parameter is passed to the git fetch subcommand in a way such that additional flags can be set. The additional flags can be used to perform a command injection.

CPENameOperatorVersion
giteq1.2.6
giteq1.8.0
giteq1.4.0
giteq1.5.0
giteq1.7.0
giteq1.10.2
giteq1.10.0
giteq1.10.1
giteq1.6.0
giteq1.9.0
Rows per page:
1-10 of 301

Related

cve 1
prion 1
osv 3
openvas 5
ubuntucve 1
debiancve 1
redhatcve 1
fedora 3
github 1
cvelist 1
nvd 1
veracode 1
mageia 1
nessus 3
debian 1
redhat 1
rocky 1
cve
cve
CVE-2022-25648
2022-04-19 17:15:11
prion
prion
Command injection
2022-04-19 17:15:00
osv
osv
BIT-git-2022-25648
2024-03-06 10:52:03
ruby-git - security update
2023-01-31 00:00:00
Important: Satellite 6.12 Release
2022-11-16 13:21:30
openvas
openvas
Fedora: Security Advisory for rubygem-git (FEDORA-2022-f09e0d8b0e)
2022-05-29 00:00:00
Mageia: Security Advisory (MGASA-2022-0248)
2022-07-06 00:00:00
Fedora: Security Advisory for rubygem-git (FEDORA-2022-353e1cf8b6)
2022-05-29 00:00:00
ubuntucve
ubuntucve
CVE-2022-25648
2022-04-19 00:00:00
debiancve
debiancve
CVE-2022-25648
2022-04-19 17:15:11
redhatcve
redhatcve
CVE-2022-25648
2022-04-20 05:00:14
fedora
fedora
[SECURITY] Fedora 34 Update: rubygem-git-1.11.0-1.fc34
2022-05-28 01:32:44
[SECURITY] Fedora 36 Update: rubygem-git-1.11.0-1.fc36
2022-05-28 01:15:48
[SECURITY] Fedora 35 Update: rubygem-git-1.11.0-1.fc35
2022-05-28 01:22:25
github
github
Command injection in ruby-git
2022-04-20 00:00:33
cvelist
cvelist
CVE-2022-25648 Command Injection
2022-04-19 00:00:00
nvd
nvd
CVE-2022-25648
2022-04-19 17:15:11
veracode
veracode
Command Injection
2022-04-20 02:58:37
mageia
mageia
Updated ruby-git packages fix security vulnerability
2022-07-05 22:11:26
nessus
nessus
Debian DLA-3303-1 : ruby-git - LTS security update
2023-01-31 00:00:00
RHEL 8 : Satellite 6.12 Release (Important) (RHSA-2022:8506)
2024-04-28 00:00:00
Rocky Linux 8 : Satellite 6.12 Release (Important) (RLSA-2022:8506)
2023-11-06 00:00:00
debian
debian
[SECURITY] [DLA 3303-1] ruby-git security update
2023-01-30 22:33:35
redhat
redhat
(RHSA-2022:8506) Important: Satellite 6.12 Release
2022-11-16 13:21:30
rocky
rocky
Satellite 6.12 Release
2022-11-16 13:21:30

0.002 Low

EPSS

Percentile

55.7%

JSON
Related for OSV:GHSA-69P6-WVMQ-27GG
cve1prion1osv3openvas5ubuntucve1debiancve1redhatcve1fedora3github1cvelist1nvd1veracode1mageia1nessus3debian1redhat1rocky1