Lucene search
Veracode Vulnerability DatabaseVERACODE:30188HistoryApr 28, 2021 - 4:59 a.m.
Arbtirary Command Execution
2021-04-2804:59:40
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
8
0.117 Low
EPSS
Percentile
95.3%
composer/composer is vulnerable to arbitrary command execution. A missing argument delimiter allows an attacker to inject and execute arbitrary commands via VCS repository URLs or source download URLs on systems with Mercurial.
References
getcomposer.org/
github.com/composer/composer/security/advisories/GHSA-h5h8-pc6h-jvvx
lists.debian.org/debian-lts-announce/2021/05/msg00009.html
lists.fedoraproject.org/archives/list/[email protected]/message/FAQUAMGO4Q4BLNZ2OH4CXQD7UK4IO2GE/
lists.fedoraproject.org/archives/list/[email protected]/message/KN3DMFH42BJW45VT6FYF2RXKC26D6VC2/
www.debian.org/security/2021/dsa-4907
Related
nessus
nessus
Debian DLA-2654-1 : composer security update
2021-05-12 00:00:00
Debian DSA-4907-1 : composer - security update
2021-05-03 00:00:00
openSUSE 15 Security Update : php-composer (openSUSE-SU-2021:1289-1)
2021-09-22 00:00:00
osv
osv
composer vulnerability
2022-07-08 08:52:19
composer - security update
2021-04-29 00:00:00
BIT-composer-2021-29472
2024-03-06 10:51:34
ubuntucve
ubuntucve
CVE-2021-29472
2021-04-27 00:00:00
openvas
openvas
Ubuntu: Security Advisory (USN-5220-1)
2023-01-27 00:00:00
Debian: Security Advisory (DSA-4907-1)
2021-05-01 00:00:00
openSUSE: Security Advisory for php-composer (openSUSE-SU-2021:1289-1)
2021-09-22 00:00:00
debian
debian
[SECURITY] [DLA 2654-1] composer security update
2021-05-11 20:50:50
[SECURITY] [DSA 4907-1] composer security update
2021-04-29 16:50:09
[SECURITY] [DSA 4907-1] composer security update
2021-04-29 16:50:09
cve
cve
CVE-2021-29472
2021-04-27 21:15:08
alpinelinux
alpinelinux
CVE-2021-29472
2021-04-27 21:15:08
thn
thn
A New PHP Composer Bug Could Enable Widespread Supply-Chain Attacks
2021-04-29 15:15:00
Researchers Report Supply Chain Vulnerability in Packagist PHP Repository
2022-10-04 15:09:00
suse
suse
Security update for php-composer (important)
2021-09-21 00:00:00
github
github
fedora
fedora
[SECURITY] Fedora 34 Update: composer-2.0.13-1.fc34
2021-05-26 01:00:32
[SECURITY] Fedora 33 Update: composer-2.0.13-1.fc33
2021-05-26 01:10:08
ubuntu
ubuntu
Composer vulnerability
2022-07-08 00:00:00
nvd
nvd
CVE-2021-29472
2021-04-27 21:15:08
prion
prion
Remote code execution
2021-04-27 21:15:00
friendsofphp
friendsofphp
debiancve
debiancve
CVE-2021-29472
2021-04-27 21:15:08
