Files
CVEs-PoC/2019/CVE-2019-10803.md
2025-09-29 21:09:30 +02:00

791 B

CVE-2019-10803

Description

push-dir through 0.4.1 allows execution of arbritary commands. Arguments provided as part of the variable "opt.branch" is not validated before being provided to the "git" command within "index.js#L139". This could be abused by an attacker to inject arbitrary commands.

POC

Reference

Github

No PoCs found on GitHub currently.