« Volver al listado

CVE-2019-10803

Estado: ModificadaCrítica (9.8)—

push-dir versiones hasta 0.4.1, permite una ejecución de código arbitraria. Los argumentos proporcionados como parte de la variable "opt.branch" no son comprobados antes de ser suministrados al comando "git" dentro de "index.js#L139". Esto puede ser violado por parte de un atacante para inyectar comandos arbitrarios.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Push-dir Project — Push-dir

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2019-10803",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 7.5,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
          "authentication": "NONE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "LOW",
          "availabilityImpact": "PARTIAL",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 6.4,
        "baseSeverity": "HIGH",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 9.8,
          "attackVector": "NETWORK",
          "baseSeverity": "CRITICAL",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
          "integrityImpact": "HIGH",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 5.9,
        "exploitabilityScore": 3.9
      }
    ]
  },
  "affected": [
    {
      "source": "report@snyk.io",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "push-dir",
          "versions": [
            {
              "status": "affected",
              "version": "All versions including 0.4.1"
            }
          ]
        }
      ]
    }
  ],
  "published": "2020-02-28T21:15:13.010",
  "references": [
    {
      "url": "https://github.com/L33T-KR3W/push-dir/blob/master/index.js#L139",
      "tags": [
        "Third Party Advisory"
      ],
      "source": "report@snyk.io"
    },
    {
      "url": "https://snyk.io/vuln/SNYK-JS-PUSHDIR-559009",
      "tags": [
        "Exploit",
        "Third Party Advisory"
      ],
      "source": "report@snyk.io"
    },
    {
      "url": "https://github.com/L33T-KR3W/push-dir/blob/master/index.js#L139",
      "tags": [
        "Third Party Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://snyk.io/vuln/SNYK-JS-PUSHDIR-559009",
      "tags": [
        "Exploit",
        "Third Party Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-78"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "push-dir through 0.4.1 allows execution of arbritary commands. Arguments provided as part of the variable \"opt.branch\" is not validated before being provided to the \"git\" command within \"index.js#L139\". This could be abused by an attacker to inject arbitrary commands."
    },
    {
      "lang": "es",
      "value": "push-dir versiones hasta  0.4.1, permite una ejecución de código arbitraria. Los argumentos proporcionados como parte de la variable \"opt.branch\" no son comprobados antes de ser suministrados al comando \"git\" dentro de \"index.js#L139\". Esto puede ser violado por parte de un atacante para inyectar comandos arbitrarios."
    }
  ],
  "lastModified": "2026-06-17T02:11:42.227",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:push-dir_project:push-dir:*:*:*:*:*:node.js:*:*",
              "vulnerable": true,
              "matchCriteriaId": "495D465A-DC16-40DB-A780-9075E394FBFC",
              "versionEndIncluding": "0.4.1"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "report@snyk.io"
}