CVE Catalog
CVE-2015-8969
CriticalSummary
git-fastclone before 1.0.5 passes user modifiable strings directly to a shell command. An attacker can execute malicious commands by modifying the strings that are passed as arguments to 'cd ' and 'git clone ' commands.
Risk Assessment
This vulnerability allows attackers to execute arbitrary commands on the system, potentially leading to system compromise or data leakage.
Recommendation
It is recommended to update git-fastclone to version 1.0.5 or later to mitigate the risks associated with this vulnerability.
Original NVD description (English source)
git-fastclone before 1.0.5 passes user modifiable strings directly to a shell command. An attacker can execute malicious commands by modifying the strings that are passed as arguments to "cd " and "git clone " commands in the library.