PT-2022-14911 · Libvcs · Libvcs
Alessio Della Libera
·
Published
2022-03-14
·
Updated
2023-08-08
·
CVE-2022-21187
CVSS v3.1
9.8
Critical
| Vector | AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
libvcs versions prior to 0.11.1
Description
The issue concerns Command Injection via argument injection. When the
update repo function is called, specifically when using hg, the url parameter is passed to the hg clone command. This allows for the injection of hg options, potentially leading to arbitrary command execution.Recommendations
For versions prior to 0.11.1, update to version 0.11.1 or later to resolve the issue. As a temporary workaround, consider restricting the use of the
update repo function when using hg until a patch is applied. Avoid using the url parameter in the affected function to minimize the risk of exploitation.Fix
Special Elements Injection
Argument Injection
Command Injection
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Libvcs