Поиск уязвимостей
Количество 7
Количество 7
GHSA-2mqj-m65w-jghx
Untrusted search path under some conditions on Windows allows arbitrary code execution
CVE-2024-22190
GitPython is a python library used to interact with Git repositories. There is an incomplete fix for CVE-2023-40590. On Windows, GitPython uses an untrusted search path if it uses a shell to run `git`, as well as when it runs `bash.exe` to interpret hooks. If either of those features are used on Windows, a malicious `git.exe` or `bash.exe` may be run from an untrusted repository. This issue has been patched in version 3.1.41.
CVE-2024-22190
GitPython is a python library used to interact with Git repositories. There is an incomplete fix for CVE-2023-40590. On Windows, GitPython uses an untrusted search path if it uses a shell to run `git`, as well as when it runs `bash.exe` to interpret hooks. If either of those features are used on Windows, a malicious `git.exe` or `bash.exe` may be run from an untrusted repository. This issue has been patched in version 3.1.41.
CVE-2024-22190
GitPython is a python library used to interact with Git repositories. ...
BDU:2024-00628
Уязвимость библиотеки Python для взаимодействия с git-репозиториями GitPython, связанная с использованием ненадёжного пути поиска, позволяющая нарушителю выполнить произвольный код с повышенными привилегиями
ALT-PU-2024-2744
ALT-PU-2024-2744: package `python3-module-GitPython` update to version 3.1.42-alt0.p10.1
ALT-PU-2024-2402
ALT-PU-2024-2402: package `python3-module-GitPython` update to version 3.1.41-alt1
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
| GHSA-2mqj-m65w-jghx Untrusted search path under some conditions on Windows allows arbitrary code execution | CVSS3: 7.8 | 0% Низкий | почти 3 года назад |
 | CVE-2024-22190 GitPython is a python library used to interact with Git repositories. There is an incomplete fix for CVE-2023-40590. On Windows, GitPython uses an untrusted search path if it uses a shell to run `git`, as well as when it runs `bash.exe` to interpret hooks. If either of those features are used on Windows, a malicious `git.exe` or `bash.exe` may be run from an untrusted repository. This issue has been patched in version 3.1.41. | CVSS3: 7.8 | 0% Низкий | почти 3 года назад |
 | CVE-2024-22190 GitPython is a python library used to interact with Git repositories. There is an incomplete fix for CVE-2023-40590. On Windows, GitPython uses an untrusted search path if it uses a shell to run `git`, as well as when it runs `bash.exe` to interpret hooks. If either of those features are used on Windows, a malicious `git.exe` or `bash.exe` may be run from an untrusted repository. This issue has been patched in version 3.1.41. | CVSS3: 7.8 | 0% Низкий | почти 3 года назад |
| CVE-2024-22190 GitPython is a python library used to interact with Git repositories. ... | CVSS3: 7.8 | 0% Низкий | почти 3 года назад |
 | BDU:2024-00628 Уязвимость библиотеки Python для взаимодействия с git-репозиториями GitPython, связанная с использованием ненадёжного пути поиска, позволяющая нарушителю выполнить произвольный код с повышенными привилегиями | CVSS3: 7.8 | 0% Низкий | почти 3 года назад |
| ALT-PU-2024-2744 ALT-PU-2024-2744: package `python3-module-GitPython` update to version 3.1.42-alt0.p10.1 | CVSS3: 7.8 | 0% Низкий | больше 2 лет назад |
| ALT-PU-2024-2402 ALT-PU-2024-2402: package `python3-module-GitPython` update to version 3.1.41-alt1 | CVSS3: 7.8 | 0% Низкий | больше 2 лет назад |
Уязвимостей на страницу