Arbitrary Command Injection (CVE-2022-21186)

Résumé

Arbitrary Command Injection

Description d'origine

La description telle que publiée par la source (souvent en anglais).

The package @acrontum/filesystem-template before 0.0.2 are vulnerable to Arbitrary Command Injection due to the fetchRepo API missing sanitization of the href field of external input.

Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV

Références

advisory github.com
advisory nvd.nist.gov
web github.com
web security.snyk.io