CVEDB API

All versions of package git-archive are vulnerable to Command Injection via the exports function.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.003

EPSS Ranking 53.4%

CVSS Severity

CVSS v3 Score 6.4

References

Products affected by CVE-2020-28422

Git-Archive Project » Git-Archive » Version: N/A

cpe:2.3:a:git-archive_project:git-archive:-
Git-Archive Project » Git-Archive » Version: 0.0.3

cpe:2.3:a:git-archive_project:git-archive:0.0.3
Git-Archive Project » Git-Archive » Version: 0.0.4

cpe:2.3:a:git-archive_project:git-archive:0.0.4
Git-Archive Project » Git-Archive » Version: 0.1.3

cpe:2.3:a:git-archive_project:git-archive:0.1.3
Git-Archive Project » Git-Archive » Version: 0.1.4

cpe:2.3:a:git-archive_project:git-archive:0.1.4