Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
powerline-gitstatus (aka Powerline Gitstatus) before 1.3.2 allows arbitrary code execution. git repositories can contain per-repository configuration that changes the behavior of git, including running arbitrary commands. When using powerline-gitstatus, changing to a directory automatically runs git commands in order to display information about the current repository in the prompt. If an attacker can convince a user to change their current directory to one controlled by the attacker, such as in a shared filesystem or extracted archive, powerline-gitstatus will run arbitrary commands under the attacker's control. NOTE: this is similar to CVE-2022-20001.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Powerline Gitstatus 命令注入漏洞
Vulnerability Description
Powerline Gitstatus是Jasper N. Brouwer个人开发者的一个用于显示 Git 工作副本状态的库。 Powerline Gitstatus 1.3.2之前版本存在安全漏洞，该漏洞源于允许任意代码执行，如果攻击者可以说服用户将其当前目录更改为由攻击者控制的目录，例如在共享文件系统或提取的存档中，powerline-gitstatus将在攻击者的控制下运行任意命令。
CVSS Information
N/A
Vulnerability Type
N/A