title: Command Injection
description: All versions of package git-archive are vulnerable to Command Injection via the exports function.
problem types: Command Injection
affected:
{
product: git-archive
vendor: n/a
versions:
lessThan: unspecified, status: affected, version: 0, versionType: custom
}
metrics:
cvssV3_1: [
attackComplexity: HIGH
attackVector: LOCAL
availabilityImpact: LOW
baseScore: 6.4
baseSeverity: MEDIUM
confidentialityImpact: HIGH
exploitCodeMaturity: NOT_DEFINED
integrityImpact: NONE
privilegesRequired: LOW
remediationLevel: TEMPORARY_FIX
reportConfidence: NOT_DEFINED
scope: CHANGED
temporalScore: 6.2
temporalSeverity: MEDIUM
userInteraction: NONE
vectorString: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:L/RL:T
version: 3.1
]