Description (CNA)
NPM package gitlabhook version 0.0.17 is vulnerable to a Command Injection vulnerability. Arbitrary commands can be injected through the repository name.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / gitlabhook | affected Not Fixed |
CWE
CWE-78
References
- https://hackerone.com/reports/685447
- http://packetstormsecurity.com/files/154598/NPMJS-gitlabhook-0.0.17-Remote-Command-Execution.html
ADP enrichment
No English description supplied.