Git Php
1 CVEs
product
Monthly
The package czproject/git-php before 4.0.3 are vulnerable to Command Injection via git argument injection. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.
PHP
Command Injection
Git Php
NVD
GitHub
CVSS 3.1
9.8
EPSS
3.9%
CVE-2022-25866
PHP
EPSS 4%
CVSS 9.8
CRITICAL
POC
PATCH
Act Now
The package czproject/git-php before 4.0.3 are vulnerable to Command Injection via git argument injection. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.
PHP
Command Injection
Git Php
NVD
GitHub