70 matches found
CVE-2019-15000
The commit diff rest endpoint in Bitbucket Server and Data Center before 5.16.10 the fixed version for 5.16.x , from 6.0.0 before 6.0.10 the fixed version for 6.0.x, from 6.1.0 before 6.1.8 the fixed version for 6.1.x, from 6.2.0 before 6.2.6 the fixed version for 6.2.x, from 6.3.0 before 6.3.5 t...
PT-2019-13926
Name of the Vulnerable Software and Affected Versions Bitbucket Server and Data Center versions prior to 5.16.10 Bitbucket Server and Data Center versions 6.0.0 through 6.0.9 Bitbucket Server and Data Center versions 6.1.0 through 6.1.7 Bitbucket Server and Data Center versions 6.2.0 through 6.2....
CVE-2019-15000: Improper Neutralization of Special Elements used in an OS Command
The commit diff rest endpoint in Bitbucket Server and Data Center before 5.16.10 the fixed version for 5.16.x , from 6.0.0 before 6.0.10 the fixed version for 6.0.x, from 6.1.0 before 6.1.8 the fixed version for 6.1.x, from 6.2.0 before 6.2.6 the fixed version for 6.2.x, from 6.3.0 before 6.3.5 t...
Argument Injection - CVE-2019-15000
Bitbucket Server & Bitbucket Data Center had an argument injection vulnerability, allowing an attacker to inject additional arguments into Git commands, which could lead to remote code execution. Remote attackers can exploit this argument injection vulnerability if they are able to access a Git...
CVE-2017-11353
yadm yet another dotfile manager 1.10.0 has a race condition related to the behavior of git commands in setting permissions for new files and directories, which potentially allows access to SSH and PGP keys...
Race condition
yadm yet another dotfile manager 1.10.0 has a race condition related to the behavior of git commands in setting permissions for new files and directories, which potentially allows access to SSH and PGP keys...
CVE-2017-11353
yadm yet another dotfile manager 1.10.0 has a race condition related to the behavior of git commands in setting permissions for new files and directories, which potentially allows access to SSH and PGP keys...
CVE-2017-11353
CVE-2017-11353 affects yadm (yet another dotfile manager) version 1.10.0. The issue is a race condition related to how git commands set permissions for new files and directories, which potentially allows access to SSH and PGP keys. The connected documents provide this description but do not inclu...
CVE-2017-11353
yadm yet another dotfile manager 1.10.0 has a race condition related to the behavior of git commands in setting permissions for new files and directories, which potentially allows access to SSH and PGP keys...
PT-2017-11953
Name of the Vulnerable Software and Affected Versions yadm version 1.10.0 Description The issue is related to a race condition in the behavior of git commands when setting permissions for new files and directories. This potentially allows access to SSH and PGP keys. Recommendations For version...