CVE-2021-32673
Summary
| CVE | CVE-2021-32673 |
|---|
| State | PUBLIC |
|---|
| Assigner | [email protected] |
|---|
| Source Priority | CVE Program / NVD first with legacy fallback |
|---|
| Published | 2021-06-08 17:15:00 UTC |
|---|
| Updated | 2022-04-25 17:23:00 UTC |
|---|
| Description | reg-keygen-git-hash-plugin is a reg-suit plugin to detect the snapshot key to be compare with using Git commit hash. reg-keygen-git-hash-plugin through and including 0.10.15 allow remote attackers to execute of arbitrary commands. Upgrade to version 0.10.16 or later to resolve this issue. |
|---|
NVD Known Affected Configurations (CPE 2.3)
References
| Reference | Source | Link | Tags |
|---|
| reg-keygen-git-hash-plugin - npm |
MISC |
www.npmjs.com |
|
| Remote Command Execution in reg-keygen-git-hash-plugin · Advisory · reg-viz/reg-suit · GitHub |
CONFIRM |
github.com |
|
| Merge pull request from GHSA-49q3-8867-5wmp · reg-viz/reg-suit@f84ad9c · GitHub |
MISC |
github.com |
|
| Release v0.10.16 · reg-viz/reg-suit · GitHub |
MISC |
github.com |
|
| CVE Program record |
CVE.ORG |
www.cve.org |
canonical |
| NVD vulnerability detail |
NVD |
nvd.nist.gov |
canonical, analysis |
No vendor comments have been submitted for this CVE.
Legacy QID Mappings
- 982279 Nodejs (npm) Security Update for reg-keygen-git-hash-plugin (GHSA-49q3-8867-5wmp)
