Security Advisory

CVE-2018-25083

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2023-03-27 00:00:00

Last updated 2025-02-24 19:23:58

Assigner mitre

CVSS score not scored

State PUBLISHED

The pullit package before 1.4.0 for Node.js allows OS Command Injection because eval is used on an attacker-supplied Git branch name.