Git Php Project

git-php_project

1 CVE • 1 product

Products (1)

Click to collapse

Toggle

Git Php

git-php

1 CVE

CVEs (1)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2022-25866 1Git Php Project 1Git Php Jun 17, 2026 Apr 25, 2022 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 The package czproject/git-php before 4.0.3 are vulnerable to Command Injection via git argument injection. When calling the isRemoteUrlReadable($url, array $refs = NULL) function, both the url and refs parameters are pas...Show more The package czproject/git-php before 4.0.3 are vulnerable to Command Injection via git argument injection. When calling the isRemoteUrlReadable($url, array $refs = NULL) function, both the url and refs parameters are passed to the git ls-remote subcommand in a way that additional flags can be set. The additional flags can be used to perform a command injection.Show less

CVE

VENDORS

PRODUCTS

UPDATED

PUBLISHED

CVSS

CVE-2022-25866

1Git Php Project

1Git Php

Jun 17, 2026

Apr 25, 2022

N/A· v4

9.8 CRITICAL· v3

7.5 HIGH· v2

The package czproject/git-php before 4.0.3 are vulnerable to Command Injection via git argument injection. When calling the isRemoteUrlReadable($url, array $refs = NULL) function, both the url and refs parameters are passed to the git ls-remote subcommand in a way that additional flags can be set. The additional flags can be used to perform a command injection.Show less