Lucene search
Veracode Vulnerability DatabaseVERACODE:35571HistoryMay 17, 2022 - 9:12 a.m.
Command Injection
2022-05-1709:12:26
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
18
0.002 Low
EPSS
Percentile
53.0%
workspace-tools is vulnerable to command Injection. The vulnerability exists in fetchRemoteBranch function in git.ts due to lack of sanitization in flagging inputs which allows a malicious attacker to inject and execute arbitrary code.
| CPE | Name | Operator | Version |
|---|---|---|---|
| workspace-tools | le | 0.18.3 | |
| workspace-tools | le | 0.18.3 |
Related
cve
cve
CVE-2022-25865
2022-05-13 20:15:08
osv
osv
CVE-2022-25865
2022-05-13 20:15:08
Command injection in workspace-tools
2022-05-14 00:01:08
nvd
nvd
CVE-2022-25865
2022-05-13 20:15:08
cvelist
cvelist
CVE-2022-25865 Command Injection
2022-05-13 00:00:00
prion
prion
Command injection
2022-05-13 20:15:00
github
github
Command injection in workspace-tools
2022-05-14 00:01:08