8.8

CVE-2022-25766

Exploit

Remote Code Execution (RCE)

The package ungit before 1.5.20 are vulnerable to Remote Code Execution (RCE) via argument injection. The issue occurs when calling the /api/fetch endpoint. User controlled values (remote and ref) are passed to the git fetch command. By injecting some git options it was possible to get arbitrary command execution.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Ungit Project ≫ Ungit SwPlatformnode.js Version < 1.5.20
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 33.89% 0.982
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 8.8 2.8 5.9
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
nvd@nist.gov 6.5 8 6.4
AV:N/AC:L/Au:S/C:P/I:P/A:P
report@snyk.io 8.8 2.8 5.9
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CWE-88 Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')

The product constructs a string for a command to be executed by a separate component in another control sphere, but it does not properly delimit the intended arguments, options, or switches within that command string.

https://github.com/FredrikNoren/ungit/blob/master/CHANGELOG.md%231520
Third Party Advisory
Broken Link
Release Notes
https://github.com/FredrikNoren/ungit/pull/1510
Patch
Third Party Advisory
Exploit
https://snyk.io/vuln/SNYK-JS-UNGIT-2414099
Third Party Advisory
Release Notes