CVE-2020-7615

Summary

fsa through 0.5.1 is vulnerable to Command Injection. The first argument of 'execGitCommand()', located within 'lib/rep.js#63' can be controlled by users without any sanitization to inject arbitrary commands.

Affected Software

VendorProductVersion RangeStatus
n/afsaAll versions including 0.5.1affected

Weaknesses

  • Command Injection

ADP Enrichment

CVE Program Container

Additional References

References