CVE-2018-3785

CVE-2018-3785

Vendor Https://Github.com/Stevemao

Product git-dummy-commit

Weakness CWE-78

Published August 17, 2018

Last update August 5, 2024

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

A command injection in git-dummy-commit v1.3.0 allows os level commands to be executed due to an unescaped parameter.

Key dates

02Disclosure timeline

August 17, 2018 CVE published

August 5, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2018-3785 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/78.html

Related vulnerabilities

04Related CVE

CVE-2026-1665 Command Injection in nvm via NVM_AUTH_HEADER in wget code path CVE-2024-11007 CVE-2026-40261 Composer has Command Injection via Malicious Perforce Reference CVE-2023-44427 D-Link DIR-X3260 SetSysEmailSettings SMTPServerAddress Command Injection Remote Code Execution Vulnerability CVE-2023-25507