Lucene search

K
prionPRIOn knowledge basePRION:CVE-2022-25860
HistoryJan 26, 2023 - 9:15 p.m.

Input validation

2023-01-2621:15:00
PRIOn knowledge base
www.prio-n.com
6
input validation
remote code execution
improper input sanitization
cve-2022-25912
nvd

9.7 High

AI Score

Confidence

High

0.021 Low

EPSS

Percentile

89.2%

Versions of the package simple-git before 3.16.0 are vulnerable to Remote Code Execution (RCE) via the clone(), pull(), push() and listRemote() methods, due to improper input sanitization. This vulnerability exists due to an incomplete fix of CVE-2022-25912.

CPENameOperatorVersion
simple-gitlt3.16.0

9.7 High

AI Score

Confidence

High

0.021 Low

EPSS

Percentile

89.2%