Description
A command injection in git-dummy-commit v1.3.0 allows os level commands to be executed due to an unescaped parameter.
Remediation
References
https://hackerone.com/reports/341710
Related Vulnerabilities
CVE-2021-23624 Vulnerability in npm package dotty
CVE-2022-36092 Vulnerability in maven package org.xwiki.platform:xwiki-platform-oldcore
CVE-2022-36882 Vulnerability in maven package org.jenkins-ci.plugins:git
CVE-2024-36401 Vulnerability in maven package org.geoserver.web:gs-web-app
CVE-2022-0722 Vulnerability in maven package org.webjars.npm:parse-url