Description
OS Command Injection vulnerability in bbultman gitsome through 0.2.3 allows attackers to execute arbitrary commands via a crafted tag name of the target git repository.
Remediation
References
https://advisory.checkmarx.net/advisory/CX-2021-4780
https://www.npmjs.com/package/gitsome
Related Vulnerabilities
CVE-2022-30500 Vulnerability in maven package com.jflyfox:jflyfox_jfinal
CVE-2018-3726 Vulnerability in npm package crud-file-server
CVE-2023-43256 Vulnerability in npm package gladys
CVE-2019-17570 Vulnerability in maven package org.apache.xmlrpc:xmlrpc-client
CVE-2020-36184 Vulnerability in maven package com.fasterxml.jackson.core:jackson-databind