CVE-2024-22190

🗓️ 11 Jan 2024 01:23:17Reported by Alpine Linux Development TeamType

alpinelinux

alpinelinux🔗 security.alpinelinux.org👁 22 Views

GitPython incomplete fix for untrusted search path vulnerability on Windows CVE-2024-2219

Reporter	Title	Published	Views	Family All 58
IBM Security Bulletins	Security Bulletin: QRadar Suite Software includes components with multiple known vulnerabilities	15 Feb 202413:10	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in GitPython affects IBM Process Mining CVE-2024-22190	29 Mar 202410:40	–	ibm
AlpineLinux	CVE-2023-40590	28 Aug 202317:24	–	alpinelinux
BDU FSTEC	The vulnerability of the Python library for interacting with git repositories, GitPython, allows a hacker to execute arbitrary commands.	5 Sep 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Python library for interacting with git repositories, GitPython, is related to the use of an insecure search path, allowing attackers to execute arbitrary code with elevated privileges.	24 Jan 202400:00	–	bdu_fstec
Chainguard	CVE-2024-22190 vulnerabilities	11 Jan 202402:15	–	cgr
Circl	CVE-2023-40590	26 Aug 202307:04	–	circl
Circl	CVE-2024-22190	10 Jan 202412:17	–	circl
CNNVD	GitPython 代码问题漏洞	28 Aug 202300:00	–	cnnvd
CNNVD	GitPython Code Issues Vulnerabilities	11 Jan 202400:00	–	cnnvd

OS	OS Version	Architecture	Package	Package Version	Filename
Alpine Linux	3.22	any	py3-gitpython	3.1.37-r0	py3-gitpython-3.1.37-r0.apk
Alpine Linux	3.19	any	py3-gitpython	3.1.40-r0	py3-gitpython-3.1.40-r0.apk

Source	Link
github	www.github.com/gitpython-developers/GitPython/commit/ef3192cc414f2fd9978908454f6fd95243784c7f
github	www.github.com/gitpython-developers/GitPython/pull/1792
github	www.github.com/gitpython-developers/GitPython/security/advisories/GHSA-2mqj-m65w-jghx

21 Nov 2024 08:55Current

7.3High risk

Vulners AI Score7.3

CVSS 3.17.8

EPSS0.00465

SSVC

gitpython untrusted search path windows vulnerability cve-2024-22190 patch version 3.1.41 repositories