Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-vpq8-fvqp-vj6h

Опубликовано: 14 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 8.8

Описание

GIT version 2.15.1 and earlier contains a Input Validation Error vulnerability in Client that can result in problems including messing up terminal configuration to RCE. This attack appear to be exploitable via The user must interact with a malicious git server, (or have their traffic modified in a MITM attack).

GIT version 2.15.1 and earlier contains a Input Validation Error vulnerability in Client that can result in problems including messing up terminal configuration to RCE. This attack appear to be exploitable via The user must interact with a malicious git server, (or have their traffic modified in a MITM attack).

EPSS

Процентиль: 65%
0.01074
Низкий

8.8 High

CVSS3

Дефекты

CWE-20

Связанные уязвимости

CVSS3: 5
ubuntu
почти 9 лет назад

GIT version 2.15.1 and earlier contains a Input Validation Error vulnerability in Client that can result in problems including messing up terminal configuration to RCE. This attack appear to be exploitable via The user must interact with a malicious git server, (or have their traffic modified in a MITM attack).

CVSS3: 5
redhat
почти 9 лет назад

GIT version 2.15.1 and earlier contains a Input Validation Error vulnerability in Client that can result in problems including messing up terminal configuration to RCE. This attack appear to be exploitable via The user must interact with a malicious git server, (or have their traffic modified in a MITM attack).

CVSS3: 5
nvd
почти 9 лет назад

GIT version 2.15.1 and earlier contains a Input Validation Error vulnerability in Client that can result in problems including messing up terminal configuration to RCE. This attack appear to be exploitable via The user must interact with a malicious git server, (or have their traffic modified in a MITM attack).

CVSS3: 5
debian
почти 9 лет назад

GIT version 2.15.1 and earlier contains a Input Validation Error vulne ...

CVSS3: 7.8
altlinux
больше 8 лет назад

ALT-PU-2018-2090: package `git` update to version 2.17.1-alt2

EPSS

Процентиль: 65%
0.01074
Низкий

8.8 High

CVSS3

Дефекты

CWE-20