mirror of
https://github.com/0xMarcio/cve.git
synced 2026-05-28 19:41:33 +02:00
660 B
660 B
CVE-2021-44684
Description
naholyr github-todos 3.1.0 is vulnerable to command injection. The range argument for the _hook subcommand is concatenated without any validation, and is directly used by the exec function.
POC
Reference
Github
No PoCs found on GitHub currently.