Czproject/git-php vulnerabilities
We track 1 vulnerability in Czproject/git-php products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on April 25, 2022.
1vulnerabilities
1critical
0high
0exploited
9.8average CVSS score
Latest Czproject/git-php vulnerabilities
- 9.8 Critical severity
czproject/git-php: Improper Neutralization of Argument Delimiters in a Command
The package czproject/git-php before 4.0.3 are vulnerable to Command Injection via git argument injection. When calling the isRemoteUrlReadable($url, array $refs = NULL) function, both the url and refs parameters are passed to the git ls-remote subcommand in a