Описание
GitHub Git LFS before 2.1.1 allows remote attackers to execute arbitrary commands via an ssh URL with an initial dash character in the hostname, located on a "url =" line in a .lfsconfig file within a repository.
| Релиз | Статус | Примечание |
|---|---|---|
| artful | ignored | end of life |
| bionic | not-affected | 2.3.4-1 |
| cosmic | not-affected | 2.3.4-1 |
| devel | not-affected | 2.3.4-1 |
| esm-apps/bionic | not-affected | 2.3.4-1 |
| esm-infra-legacy/trusty | DNE | |
| precise/esm | DNE | |
| trusty | DNE | |
| trusty/esm | DNE | |
| upstream | released | 2.1.1 |
Показывать по
10
6.8 Medium
CVSS2
8.8 High
CVSS3
Связанные уязвимости
CVSS3: 8.8
nvd
около 8 лет назад
GitHub Git LFS before 2.1.1 allows remote attackers to execute arbitrary commands via an ssh URL with an initial dash character in the hostname, located on a "url =" line in a .lfsconfig file within a repository.
CVSS3: 8.8
debian
около 8 лет назад
GitHub Git LFS before 2.1.1 allows remote attackers to execute arbitra ...
CVSS3: 8.8
github
больше 3 лет назад
GitHub Git LFS Arbitrary command execution vulnerability
6.8 Medium
CVSS2
8.8 High
CVSS3