Lucene search

K
osvGoogleOSV:GO-2021-0073
HistoryApr 14, 2021 - 8:04 p.m.

Arbitrary command execution in github.com/git-lfs/git-lfs

2021-04-1420:04:52
Google
osv.dev
7

8.7 High

AI Score

Confidence

High

0.005 Low

EPSS

Percentile

76.3%

Arbitrary command execution can be triggered by improperly sanitized SSH URLs in LFS configuration files. This can be triggered by cloning a malicious repository.

8.7 High

AI Score

Confidence

High

0.005 Low

EPSS

Percentile

76.3%