Description
A command injection in git-dummy-commit v1.3.0 allows os level commands to be executed due to an unescaped parameter.
Remediation
References
https://hackerone.com/reports/341710
Related Vulnerabilities
CVE-2022-41936 Vulnerability in maven package org.xwiki.platform:xwiki-platform-rest-server
CVE-2020-7773 Vulnerability in npm package markdown-it-highlightjs
CVE-2020-8137 Vulnerability in maven package org.webjars.npm:uppy
CVE-2023-36542 Vulnerability in maven package org.apache.nifi:nifi-hbase_2-client-service
CVE-2022-39353 Vulnerability in maven package org.webjars.npm:xmldom