CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2022-25860

Versions of the package simple-git before 3.16.0 are vulnerable to Remote Code Execution (RCE) via the clone(), pull(), push() and listRemote() methods, due to improper input sanitization. This vulnerability exists due to an incomplete fix of [CVE-2022-25912](https://security.snyk.io/vuln/SNYK-JS-SIMPLEGIT-3112221).

Exploit prediction scoring system (EPSS) score

EPSS Score 0.323

EPSS Ranking 96.7%

CVSS Severity

CVSS v3 Score 8.1

References

Products affected by CVE-2022-25860

Simple-Git Project » Simple-Git » Version: N/A

cpe:2.3:a:simple-git_project:simple-git:-
Simple-Git Project » Simple-Git » Version: 3.0.0

cpe:2.3:a:simple-git_project:simple-git:3.0.0
Simple-Git Project » Simple-Git » Version: 3.0.1

cpe:2.3:a:simple-git_project:simple-git:3.0.1
Simple-Git Project » Simple-Git » Version: 3.0.2

cpe:2.3:a:simple-git_project:simple-git:3.0.2
Simple-Git Project » Simple-Git » Version: 3.0.3

cpe:2.3:a:simple-git_project:simple-git:3.0.3
Simple-Git Project » Simple-Git » Version: 3.0.4

cpe:2.3:a:simple-git_project:simple-git:3.0.4
Simple-Git Project » Simple-Git » Version: 3.1.0

cpe:2.3:a:simple-git_project:simple-git:3.1.0
Simple-Git Project » Simple-Git » Version: 3.1.1

cpe:2.3:a:simple-git_project:simple-git:3.1.1
Simple-Git Project » Simple-Git » Version: 3.10.0

cpe:2.3:a:simple-git_project:simple-git:3.10.0
Simple-Git Project » Simple-Git » Version: 3.11.0

cpe:2.3:a:simple-git_project:simple-git:3.11.0
Simple-Git Project » Simple-Git » Version: 3.12.0

cpe:2.3:a:simple-git_project:simple-git:3.12.0
Simple-Git Project » Simple-Git » Version: 3.13.0

cpe:2.3:a:simple-git_project:simple-git:3.13.0
Simple-Git Project » Simple-Git » Version: 3.14.0

cpe:2.3:a:simple-git_project:simple-git:3.14.0
Simple-Git Project » Simple-Git » Version: 3.14.1

cpe:2.3:a:simple-git_project:simple-git:3.14.1
Simple-Git Project » Simple-Git » Version: 3.15.0

cpe:2.3:a:simple-git_project:simple-git:3.15.0
Simple-Git Project » Simple-Git » Version: 3.15.1

cpe:2.3:a:simple-git_project:simple-git:3.15.1
Simple-Git Project » Simple-Git » Version: 3.2.4

cpe:2.3:a:simple-git_project:simple-git:3.2.4
Simple-Git Project » Simple-Git » Version: 3.2.6

cpe:2.3:a:simple-git_project:simple-git:3.2.6
Simple-Git Project » Simple-Git » Version: 3.3.0

cpe:2.3:a:simple-git_project:simple-git:3.3.0
Simple-Git Project » Simple-Git » Version: 3.4.0

cpe:2.3:a:simple-git_project:simple-git:3.4.0
Simple-Git Project » Simple-Git » Version: 3.5.0

cpe:2.3:a:simple-git_project:simple-git:3.5.0
Simple-Git Project » Simple-Git » Version: 3.6.0

cpe:2.3:a:simple-git_project:simple-git:3.6.0
Simple-Git Project » Simple-Git » Version: 3.7.0

cpe:2.3:a:simple-git_project:simple-git:3.7.0
Simple-Git Project » Simple-Git » Version: 3.7.1

cpe:2.3:a:simple-git_project:simple-git:3.7.1
Simple-Git Project » Simple-Git » Version: 3.8.0

cpe:2.3:a:simple-git_project:simple-git:3.8.0
Simple-Git Project » Simple-Git » Version: 3.9.0

cpe:2.3:a:simple-git_project:simple-git:3.9.0

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2022-25860

Products

Pricing

Contact Us