Description
A command injection in git-dummy-commit v1.3.0 allows os level commands to be executed due to an unescaped parameter.
Remediation
References
https://hackerone.com/reports/341710
Related Vulnerabilities
CVE-2023-36478 Vulnerability in maven package org.eclipse.jetty.http2:http2-hpack
CVE-2021-43306 Vulnerability in maven package org.webjars:jquery-validation
CVE-2023-38992 Vulnerability in maven package org.jeecgframework.boot:jeecg-boot-common
CVE-2022-47551 Vulnerability in maven package io.apiman:apiman-common-config