Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2025-46835

Опубликовано: 10 июл. 2025
Источник: nvd
CVSS3: 8.5
EPSS Низкий

Описание

Git GUI allows you to use the Git source control management tools via a GUI. When a user clones an untrusted repository and is tricked into editing a file located in a maliciously named directory in the repository, then Git GUI can create and overwrite files for which the user has write permission. This vulnerability is fixed in 2.43.7, 2.44.4, 2.45.4, 2.46.4, 2.47.3, 2.48.2, 2.49.1, and 2.50.1.

EPSS

Процентиль: 22%
0.00296
Низкий

8.5 High

CVSS3

Дефекты

CWE-88

Связанные уязвимости

CVSS3: 8.5
ubuntu
около 1 года назад

Git GUI allows you to use the Git source control management tools via a GUI. When a user clones an untrusted repository and is tricked into editing a file located in a maliciously named directory in the repository, then Git GUI can create and overwrite files for which the user has write permission. This vulnerability is fixed in 2.43.7, 2.44.4, 2.45.4, 2.46.4, 2.47.3, 2.48.2, 2.49.1, and 2.50.1.

CVSS3: 3.1
redhat
около 1 года назад

Git GUI allows you to use the Git source control management tools via a GUI. When a user clones an untrusted repository and is tricked into editing a file located in a maliciously named directory in the repository, then Git GUI can create and overwrite files for which the user has write permission. This vulnerability is fixed in 2.43.7, 2.44.4, 2.45.4, 2.46.4, 2.47.3, 2.48.2, 2.49.1, and 2.50.1.

msrc
около 1 года назад

GitHub: CVE-2025-46835 Git File Overwrite Vulnerability

CVSS3: 8.5
debian
около 1 года назад

Git GUI allows you to use the Git source control management tools via ...

CVSS3: 8.5
fstec
около 1 года назад

Уязвимость графический интерфейс пользователя Git GUI, связанная с внедрением или модификацией аргументов, позволяющая нарушителю создавать или перезаписывать произвольные файлы

EPSS

Процентиль: 22%
0.00296
Низкий

8.5 High

CVSS3

Дефекты

CWE-88