Vulnerabilities > Squareup > GIT Fastclone

DATE CVE VULNERABILITY TITLE RISK
2016-11-03 CVE-2015-8969 Command Injection vulnerability in Squareup Git-Fastclone 1.0.0/1.0.1
git-fastclone before 1.0.5 passes user modifiable strings directly to a shell command.
network
low complexity
square squareup CWE-77
critical
 10.0
10
2016-11-03 CVE-2015-8968 Command Injection vulnerability in Squareup Git-Fastclone 1.0.0
git-fastclone before 1.0.1 permits arbitrary shell command execution from .gitmodules.
network
square squareup CWE-77
critical
 9.3
9.3