Arbitrary File Overwrite in Eclipse JGit

🗓️ 18 Sep 2023 15:30:18Reported by GitHub Advisory DatabaseType

Arb. File Overwrite in Eclipse JGit <= 6.6.0, RCE Exploi

Reporter	Title	Published	Views	Family All 74
IBM Security Bulletins	Security Bulletin: IBM InfoSphere Information Server is affected by a code execution vulnerability in Eclipse JGit (CVE-2023-4759)	28 Jun 202422:21	–	ibm
IBM Security Bulletins	Security Bulletin: IBM App Connect Enterprise Toolkit and IBM Integration Bus Toolkit are vulnerable to a remote attacker due to Eclipse JGit (CVE-2023-4759)	8 Jan 202415:57	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities are addressed with IBM Cloud Pak for Business Automation iFixes for January 2024.	2 Feb 202408:25	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Decision Optimization for Cloud Pak for Data is vulnerable to a remote attacker (CVE-2023-4759)	9 Jan 202415:07	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in jgit affect Cloud Pak System [CVE-2023-4759]	5 Nov 202409:02	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Pak for Network Automation 2.6.4 fixes multiple security vulnerabilities	15 Dec 202314:31	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Automation Decision Services January 2024 - Multiple CVEs addressed	5 Feb 202417:48	–	ibm
IBM Security Bulletins	Security Bulletin: Business Automation Manager Open Editions 8.0.5 - jgit vulnerability	3 Feb 202508:06	–	ibm
IBM Security Bulletins	Security Bulletin:DevOps Test Embedded for Eclipse IDE is vulnerable to XXE injection & RCE due to use of JGit and EGit ( CVE-2023-4759 and CVE-2025-4949)	19 May 202607:32	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM CloudPak for AIOps	29 Apr 202502:00	–	ibm

Vulners

Node

org.eclipse.jgit org.eclipse.jgitRange<5.13.3.202401111512-rmaven

org.eclipse.jgit org.eclipse.jgitRange6.0.0.202111291000-r–6.6.0.202305301015-rmaven

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2023-4759
git	www.git.eclipse.org/c/jgit/jgit.git/commit/
gitlab	www.gitlab.eclipse.org/security/vulnerability-reports/-/issues/11
projects	www.projects.eclipse.org/projects/technology.jgit/releases/6.6.1
github	www.github.com/eclipse-jgit/jgit/issues/30
projects	www.projects.eclipse.org/projects/technology.jgit/releases/5.13.3
github	www.github.com/advisories/GHSA-3p86-9955-h393

11 Apr 2024 19:37Current

8.8High risk

Vulners AI Score8.8

CVSS 3.18.8

EPSS0.01001

SSVC

CWE-178