Files
CVEs-PoC/2021/CVE-2021-44684.md
2025-09-29 21:09:30 +02:00

671 B

CVE-2021-44684

Description

naholyr github-todos 3.1.0 is vulnerable to command injection. The range argument for the _hook subcommand is concatenated without any validation, and is directly used by the exec function.

POC

Reference

Github

No PoCs found on GitHub currently.