Vulners
Lucene search
| Reporter | Title | Published | Views | Family All 48 |
|---|---|---|---|---|
 | Azure Linux 3.0 Security Update: gh (CVE-2024-52308) | 22 Jan 202600:00 | – | nessus |
| openSUSE 15 Security Update : gh (openSUSE-SU-2025:0021-1) | 23 Jan 202500:00 | – | nessus |
| Ubuntu 24.04 LTS / 24.10 : GitHub CLI vulnerability (USN-7130-1) | 26 Nov 202400:00 | – | nessus |
| Linux Distros Unpatched Vulnerability : CVE-2024-52308 | 6 Mar 202500:00 | – | nessus |
 | CVE-2024-52308 affecting package gh for versions less than 2.62.0-1 | 12 Dec 202401:02 | – | cbl_mariner |
 | CVE-2024-52308 vulnerabilities | 14 Nov 202423:15 | – | cgr |
 | CVE-2024-52308 | 14 Nov 202423:02 | – | circl |
 | GitHub CLI 命令注入漏洞 | 14 Nov 202400:00 | – | cnnvd |
 | CVE-2024-52308 Connecting to a malicious Codespaces via GH CLI could allow command execution on the user's computer | 14 Nov 202422:55 | – | cvelist |
 | CVE-2024-52308 | 14 Nov 202422:55 | – | debiancve |
10
[
{
"defaultStatus": "unaffected",
"product": "cli",
"vendor": "cli",
"versions": [
{
"status": "affected",
"version": "<= 2.61.0"
}
]
}
]| Source | Link |
|---|---|
| github | www.github.com/cli/cli/security/advisories/GHSA-p2h2-3vg9-4p87 |
| Parameter | Position | Path | Description | CWE |
|---|---|---|---|---|
| remote_username | path | gh codespace ssh | Remote code execution via malicious SSH server in a codespaces devcontainer when using gh codespace ssh, by injecting SSH arguments through the remote username (e.g., -oProxyCommand). | CWE-77 |
| remote_username | path | gh codespace logs | Remote code execution via malicious SSH server in a codespaces devcontainer when using gh codespace logs, by injecting SSH arguments through the remote username (e.g., -oProxyCommand). | CWE-77 |
Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
20 Nov 2024 15:07Current
8.4High risk
Vulners AI Score8.4
CVSS 3.18 - 9.6
EPSS0.07533
SSVC