Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
webcheckout in myrepos through 1.20171231 does not sanitize URLs that are passed to git clone, allowing a malicious website operator or a MitM attacker to take advantage of it for arbitrary code execution, as demonstrated by an "ext::sh -c" attack or an option injection attack.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
myrepos webcheckout 输入验证错误漏洞
Vulnerability Description
myrepos是一套用于管理多个版本控制存储库的工具。webcheckout是其中的一个项目检出工具。 myrepos 1.20171231及之前版本中的webcheckout存在输入验证漏洞，该漏洞源于程序没有过滤URLs。远程攻击者可利用该漏洞执行代码。
CVSS Information
N/A
Vulnerability Type
N/A