CVE-2021-44685

https://notcve.org/view.php?id=CVE-2021-44685

Git-it through 4.4.0 allows OS command injection at the Branches Aren't Just For Birds challenge step. During the verification process, it attempts to run the reflog command followed by the current branch name (which is not sanitized for execution). Git-it versiones hasta 4.4.0, permite una inyección de comandos del sistema operativo en el paso de desafío Branches Aren't Just For Birds. Durante el proceso de verificación, se intenta ejecutar el comando reflog seguido del nombre de la rama actual (que no está desinfectado para su ejecución) • https://github.com/dwisiswant0/advisory/issues/3 https://github.com/jlord/git-it-electron/releases • CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') •