CVE-2024-53858

CVE-2024-53858 affects the gh CLI (GitHub CLI) and can leak authentication tokens when cloning repositories that contain git submodules hosted outside GitHub.com/ghe.com. The root cause is that certain gh commands (e.g., gh repo clone, gh repo fork, gh pr checkout) invoke git in a way that retrie...

PT-2024-3698 · Git +9 · Git +9

Name of the Vulnerable Software and Affected Versions: Git affected versions not specified Description: The issue is related to an incorrect restriction of the path name to a directory with limited access in the distributed version control system Git. Exploitation of this issue may allow an...