CVE-2019-10803

CVE-2019-10803 is a critical command injection vulnerability affecting the push-dir project's push-dir package up to version 0.4.1. It allows unauthenticated attackers to execute arbitrary commands due to insufficient validation of the "opt.branch" variable before it's passed to the "git" command. With a CVSS score of 9.8, this vulnerability poses a severe risk of complete compromise (confidentiality, integrity, and availability) with low attack complexity. There is currently no evidence of active exploitation, publicly available exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.