Lucene search
K

8 matches found

OSV
OSV
added 2023/01/13 5:37 p.m.11 views

MGASA-2023-0001 Updated python-gitpython packages fix security vulnerability

Remote Code Execution RCE due to improper user input validation, which makes it possible to inject a maliciously crafted remote URL into the clone command. Exploiting this vulnerability is possible because the library makes external calls to git without sufficient sanitization of input arguments...

9.8CVSS9.5AI score0.05378EPSS
Exploits1References4
Mageia
Mageia
added 2023/01/13 5:37 p.m.79 views

Updated python-gitpython packages fix security vulnerability

Remote Code Execution RCE due to improper user input validation, which makes it possible to inject a maliciously crafted remote URL into the clone command. Exploiting this vulnerability is possible because the library makes external calls to git without sufficient sanitization of input arguments...

9.8CVSS3.5AI score0.05378EPSS
Exploits1References3
Vulnrichment
Vulnrichment
added 2022/12/12 1:49 a.m.6 views

CVE-2022-25912 Remote Code Execution (RCE)

The package simple-git before 3.15.0 are vulnerable to Remote Code Execution RCE when enabling the ext transport protocol, which makes it exploitable via clone method. This vulnerability exists due to an incomplete fix of CVE-2022-24066...

8.1CVSS7.8AI score0.02784EPSS
Exploits1References5
Veracode
Veracode
added 2022/12/08 3:15 a.m.30 views

Remote Code Execution (RCE)

simple-git is vulnerable to remote code execution.The vulnerability exists in the clone function of git.js because of enabling the ext transport protocol which allows an attacker to inject and execute arbitrary codes into the system. This is an incomplete fix of CVE-2022-24066...

9.8CVSS9.4AI score0.04067EPSS
Exploits2References5Affected Software1
OSV
OSV
added 2022/12/06 6:30 a.m.35 views

GHSA-9P95-FXVG-QGQ2 simple-git vulnerable to Remote Code Execution when enabling the ext transport protocol

The package simple-git before 3.15.0 is vulnerable to Remote Code Execution RCE when enabling the ext transport protocol, which makes it exploitable via clone method. This vulnerability exists due to an incomplete fix of CVE-2022-24066...

8.1CVSS9AI score0.02784EPSS
Exploits1References7
Prion
Prion
added 2022/12/06 5:15 a.m.19 views

Design/Logic Flaw

The package simple-git before 3.15.0 are vulnerable to Remote Code Execution RCE when enabling the ext transport protocol, which makes it exploitable via clone method. This vulnerability exists due to an incomplete fix of CVE-2022-24066...

7.5CVSS9.6AI score0.04067EPSS
Exploits2References5Affected Software1
Snyk
Snyk
added 2022/11/13 12:55 p.m.1 views

Remote Code Execution (RCE)

Overview GitPython is a python library used to interact with Git repositories Affected versions of this package are vulnerable to Remote Code Execution RCE due to improper user input validation, which makes it possible to inject a maliciously crafted remote URL into the clone command. Exploiting...

9.8CVSS7.3AI score0.05378EPSS
Exploits1References2
Snyk
Snyk
added 2022/11/10 1:55 p.m.2 views

Remote Code Execution (RCE)

Overview simple-git is a light weight interface for running git commands in any node.js application. Affected versions of this package are vulnerable to Remote Code Execution RCE when enabling the ext transport protocol, which makes it exploitable via clone method. This vulnerability exists due t...

9.8CVSS7.4AI score0.04067EPSS
Exploits2References2
Rows per page
Query Builder