Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

Количество 15

Количество 15

ubuntu логотип

CVE-2025-27613

около 1 года назад

Gitk is a Tcl/Tk based Git history browser. Starting with 1.7.0, when a user clones an untrusted repository and runs gitk without additional command arguments, files for which the user has write permission can be created and truncated. The option Support per-file encoding must have been enabled before in Gitk's Preferences. This option is disabled by default. The same happens when Show origin of this line is used in the main window (regardless of whether Support per-file encoding is enabled or not). This vulnerability is fixed in 2.43.7, 2.44.4, 2.45.4, 2.46.4, 2.47.3, 2.48.2, 2.49.1, and 2.50.1.

CVSS3: 3.6
EPSS: Низкий
redhat логотип

CVE-2025-27613

около 1 года назад

Gitk is a Tcl/Tk based Git history browser. Starting with 1.7.0, when a user clones an untrusted repository and runs gitk without additional command arguments, files for which the user has write permission can be created and truncated. The option Support per-file encoding must have been enabled before in Gitk's Preferences. This option is disabled by default. The same happens when Show origin of this line is used in the main window (regardless of whether Support per-file encoding is enabled or not). This vulnerability is fixed in 2.43.7, 2.44.4, 2.45.4, 2.46.4, 2.47.3, 2.48.2, 2.49.1, and 2.50.1.

CVSS3: 4.3
EPSS: Низкий
nvd логотип

CVE-2025-27613

около 1 года назад

Gitk is a Tcl/Tk based Git history browser. Starting with 1.7.0, when a user clones an untrusted repository and runs gitk without additional command arguments, files for which the user has write permission can be created and truncated. The option Support per-file encoding must have been enabled before in Gitk's Preferences. This option is disabled by default. The same happens when Show origin of this line is used in the main window (regardless of whether Support per-file encoding is enabled or not). This vulnerability is fixed in 2.43.7, 2.44.4, 2.45.4, 2.46.4, 2.47.3, 2.48.2, 2.49.1, and 2.50.1.

CVSS3: 3.6
EPSS: Низкий
msrc логотип

CVE-2025-27613

около 1 года назад

GitHub: CVE-2025-27613 Gitk Arguments Vulnerability

EPSS: Низкий
debian логотип

CVE-2025-27613

около 1 года назад

Gitk is a Tcl/Tk based Git history browser. Starting with 1.7.0, when ...

CVSS3: 3.6
EPSS: Низкий
fstec логотип

BDU:2025-09364

около 1 года назад

Уязвимость функций Support per-file encoding() и Show origin of this line() браузера Gitk, позволяющая нарушителю получить несанкционированный доступ на создание и удаление файлов пользователя

CVSS3: 3.6
EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2025:03022-1

11 месяцев назад

Security update for git

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2025:03037-1

11 месяцев назад

Security update for git

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2025:03012-1

11 месяцев назад

security update for git, git-lfs, obs-scm-bridge, python-PyYAML

EPSS: Низкий
rocky логотип

RLSA-2025:11534

около 1 года назад

Important: git security update

EPSS: Низкий
rocky логотип

RLSA-2025:11462

10 месяцев назад

Important: git security update

EPSS: Низкий
oracle-oval логотип

ELSA-2025-11534

около 1 года назад

ELSA-2025-11534: git security update (IMPORTANT)

EPSS: Низкий
oracle-oval логотип

ELSA-2025-11533

около 1 года назад

ELSA-2025-11533: git security update (IMPORTANT)

EPSS: Низкий
oracle-oval логотип

ELSA-2025-11462

около 1 года назад

ELSA-2025-11462: git security update (IMPORTANT)

EPSS: Низкий
redos логотип

ROS-20250807-04

12 месяцев назад

Множественные уязвимости git

CVSS3: 8.6
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
ubuntu логотип
CVE-2025-27613

Gitk is a Tcl/Tk based Git history browser. Starting with 1.7.0, when a user clones an untrusted repository and runs gitk without additional command arguments, files for which the user has write permission can be created and truncated. The option Support per-file encoding must have been enabled before in Gitk's Preferences. This option is disabled by default. The same happens when Show origin of this line is used in the main window (regardless of whether Support per-file encoding is enabled or not). This vulnerability is fixed in 2.43.7, 2.44.4, 2.45.4, 2.46.4, 2.47.3, 2.48.2, 2.49.1, and 2.50.1.

CVSS3: 3.6
0%
Низкий
около 1 года назад
redhat логотип
CVE-2025-27613

Gitk is a Tcl/Tk based Git history browser. Starting with 1.7.0, when a user clones an untrusted repository and runs gitk without additional command arguments, files for which the user has write permission can be created and truncated. The option Support per-file encoding must have been enabled before in Gitk's Preferences. This option is disabled by default. The same happens when Show origin of this line is used in the main window (regardless of whether Support per-file encoding is enabled or not). This vulnerability is fixed in 2.43.7, 2.44.4, 2.45.4, 2.46.4, 2.47.3, 2.48.2, 2.49.1, and 2.50.1.

CVSS3: 4.3
0%
Низкий
около 1 года назад
nvd логотип
CVE-2025-27613

Gitk is a Tcl/Tk based Git history browser. Starting with 1.7.0, when a user clones an untrusted repository and runs gitk without additional command arguments, files for which the user has write permission can be created and truncated. The option Support per-file encoding must have been enabled before in Gitk's Preferences. This option is disabled by default. The same happens when Show origin of this line is used in the main window (regardless of whether Support per-file encoding is enabled or not). This vulnerability is fixed in 2.43.7, 2.44.4, 2.45.4, 2.46.4, 2.47.3, 2.48.2, 2.49.1, and 2.50.1.

CVSS3: 3.6
0%
Низкий
около 1 года назад
msrc логотип
CVE-2025-27613

GitHub: CVE-2025-27613 Gitk Arguments Vulnerability

0%
Низкий
около 1 года назад
debian логотип
CVE-2025-27613

Gitk is a Tcl/Tk based Git history browser. Starting with 1.7.0, when ...

CVSS3: 3.6
0%
Низкий
около 1 года назад
fstec логотип
BDU:2025-09364

Уязвимость функций Support per-file encoding() и Show origin of this line() браузера Gitk, позволяющая нарушителю получить несанкционированный доступ на создание и удаление файлов пользователя

CVSS3: 3.6
0%
Низкий
около 1 года назад
suse-cvrf логотип
SUSE-SU-2025:03022-1

Security update for git

11 месяцев назад
suse-cvrf логотип
SUSE-SU-2025:03037-1

Security update for git

11 месяцев назад
suse-cvrf логотип
SUSE-SU-2025:03012-1

security update for git, git-lfs, obs-scm-bridge, python-PyYAML

11 месяцев назад
rocky логотип
RLSA-2025:11534

Important: git security update

около 1 года назад
rocky логотип
RLSA-2025:11462

Important: git security update

10 месяцев назад
oracle-oval логотип
ELSA-2025-11534

ELSA-2025-11534: git security update (IMPORTANT)

около 1 года назад
oracle-oval логотип
ELSA-2025-11533

ELSA-2025-11533: git security update (IMPORTANT)

около 1 года назад
oracle-oval логотип
ELSA-2025-11462

ELSA-2025-11462: git security update (IMPORTANT)

около 1 года назад
redos логотип
ROS-20250807-04

Множественные уязвимости git

CVSS3: 8.6
12 месяцев назад

Уязвимостей на страницу