Описание
GitPython is a python library used to interact with Git repositories. Prior to version 3.1.48, a vulnerability in GitPython allows attackers who can supply a crafted reference path to an application using GitPython to write, overwrite, move, or delete files outside the repository’s .git directory via insufficient validation of reference paths in reference creation, rename, and delete operations. This issue has been patched in version 3.1.48.
A flaw was found in GitPython, a Python library used to interact with Git repositories. This vulnerability allows attackers to supply a specially crafted reference path to an application utilizing GitPython. Due to insufficient validation of these paths during reference creation, renaming, or deletion, an attacker can write, overwrite, move, or delete files outside the intended Git repository directory. This could lead to unauthorized modification or deletion of critical system files.
Отчет
This flaw in GitPython is rated as Moderate as it allows an attacker to perform arbitrary file write, overwrite, move, or delete operations outside of a Git repository. This is possible by supplying a crafted reference path to an application that uses GitPython, leading to potential unauthorized modification or deletion of critical system files. The impact is significant due to the potential for data integrity compromise on systems utilizing affected GitPython versions. However, exploitation is unlikely as it requires an application to use GitPython affected functions with user-supplied data. The vulnerability is not automatically exploitable simply because GitPython is installed or used. It requires to pass user-controlled data into the affected functions - thus AC:H.
Меры по смягчению последствий
Applications using GitPython should validate and sanitize all reference path inputs before passing them to GitPython's reference creation, rename, and delete APIs. Specifically, reject any reference path containing path traversal sequences such as "..". In Red Hat products, exploitation requires the ability to supply a crafted Git reference name to an application using GitPython — environments that do not expose GitPython reference operations to untrusted user input are not susceptible to this attack. Updating to GitPython 3.1.48 or later fully resolves this issue.
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| Exploit Intelligence | exploit-intelligence-tech-preview/vulnerability-analysis-rhel9 | Fix deferred | ||
| Migration Toolkit for Applications 8 | mta/mta-solution-server-rhel9 | Fix deferred | ||
| Pen Drive Powered by Red Hat Lightspeed | pen-drive/pen-drive-scanner-rhel9 | Fix deferred | ||
| Red Hat AI Inference Server | rhaiis/vllm-cpu-rhel9 | Fix deferred | ||
| Red Hat AI Inference Server | rhaiis/vllm-tpu-rhel9 | Fix deferred | ||
| Red Hat Ansible Automation Platform 2 | ansible-automation-platform-26/controller-rhel9 | Fix deferred | ||
| Red Hat Ansible Automation Platform 2 | ansible-automation-platform-26/hub-rhel9 | Fix deferred | ||
| Red Hat Ansible Automation Platform 2 | automation-controller | Fix deferred | ||
| Red Hat Enterprise Linux AI (RHEL AI) 3 | rhelai3/bootc-cuda-rhel9 | Fix deferred | ||
| Red Hat Enterprise Linux AI (RHEL AI) 3 | rhelai3/bootc-rocm-rhel9 | Fix deferred |
Показывать по
Дополнительная информация
Статус:
EPSS
6.3 Medium
CVSS3
Связанные уязвимости
GitPython is a python library used to interact with Git repositories. Prior to version 3.1.48, a vulnerability in GitPython allows attackers who can supply a crafted reference path to an application using GitPython to write, overwrite, move, or delete files outside the repository’s .git directory via insufficient validation of reference paths in reference creation, rename, and delete operations. This issue has been patched in version 3.1.48.
GitPython is a python library used to interact with Git repositories. Prior to version 3.1.48, a vulnerability in GitPython allows attackers who can supply a crafted reference path to an application using GitPython to write, overwrite, move, or delete files outside the repository’s .git directory via insufficient validation of reference paths in reference creation, rename, and delete operations. This issue has been patched in version 3.1.48.
GitPython is a python library used to interact with Git repositories. ...
GitPython reference APIs has a path traversal vulnerability that allows arbitrary file write and delete outside the repository
EPSS
6.3 Medium
CVSS3