Description
A command injection in git-dummy-commit v1.3.0 allows os level commands to be executed due to an unescaped parameter.
Remediation
References
https://hackerone.com/reports/341710
Related Vulnerabilities
CVE-2020-28865 Vulnerability in maven package com.github.kfcfans:powerjob
CVE-2020-36732 Vulnerability in maven package org.webjars.npm:crypto-js
CVE-2021-21347 Vulnerability in maven package com.thoughtworks.xstream:xstream
CVE-2020-28447 Vulnerability in npm package xopen
CVE-2023-50730 Vulnerability in maven package org.typelevel:grackle-core_native0.4_3