CVE

CVE-2021-23412

CVE-2021-23412

All versions of package gitlogplus are vulnerable to Command Injection via the main functionality, as options attributes are appended to the command to be executed without sanitization.

Source: CVE-2021-23412

Exit mobile version