Lucene search
+L

109 matches found

OSV
OSV
•added 2025/01/14 7:15 p.m.•7 views

DEBIAN-CVE-2024-50349

Git is a fast, scalable, distributed revision control system with an unusually rich command set that provides both high-level operations and full access to internals. When Git asks for credentials via a terminal prompt i.e. without using any credential helper, it prints out the host name for whic...

4.7CVSS7.2AI score0.00667EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/01/14 6:43 p.m.•43 views

CVE-2024-50349 Git does not sanitize URLs when asking for credentials interactively

Git is a fast, scalable, distributed revision control system with an unusually rich command set that provides both high-level operations and full access to internals. When Git asks for credentials via a terminal prompt i.e. without using any credential helper, it prints out the host name for whic...

2.1CVSS0.00667EPSS
SaveExploits0References3
OSV
OSV
•added 2024/11/20 5:22 p.m.•30 views

GO-2024-3265 Git credentials are exposed in Atlantis logs in github.com/runatlantis/atlantis

Git credentials are exposed in Atlantis logs in github.com/runatlantis/atlantis...

9.8CVSS7.5AI score0.00718EPSS
SaveExploits1References6
Veracode
Veracode
•added 2024/03/14 10:20 a.m.•15 views

Sensitive Information Disclosure

io.quarkus, quarkus-kubernetes-deployment is vulnerable to Git Credentials Disclosure. The vulnerability due to a flaw in the continuous integration CI configuration, leading to the inadvertent publication of git credentials to the metadata annotation...

3.5CVSS6.7AI score0.006EPSS
SaveExploits0References7Affected Software1
OSV
OSV
•added 2024/03/13 12:31 p.m.•49 views

GHSA-7G97-7R3C-5CC6 In Quarkus, git credentials could be inadvertently published

A vulnerability was found in Quarkus. In certain conditions related to the CI process, git credentials could be inadvertently published, which could put the git repository at risk...

3.5CVSS5.8AI score0.006EPSS
SaveExploits0References8
Github Security Blog
Github Security Blog
•added 2024/03/13 12:31 p.m.•29 views

In Quarkus, git credentials could be inadvertently published

A vulnerability was found in Quarkus. In certain conditions related to the CI process, git credentials could be inadvertently published, which could put the git repository at risk...

3.5CVSS6.8AI score0.006EPSS
SaveExploits0References8Affected Software1
NVD
NVD
•added 2024/03/13 10:15 a.m.•28 views

CVE-2024-1979

A vulnerability was found in Quarkus. In certain conditions related to the CI process, git credentials could be inadvertently published, which could put the git repository at risk...

3.5CVSS3.8AI score0.006EPSS
SaveExploits0References4
Prion
Prion
•added 2024/03/13 10:15 a.m.•26 views

Buffer overflow

A vulnerability was found in Quarkus. In certain conditions related to the CI process, git credentials could be inadvertently published, which could put the git repository at risk...

2.1CVSS4.1AI score0.006EPSS
SaveExploits0References3
CVE
CVE
•added 2024/03/13 9:41 a.m.•214 views

CVE-2024-1979

CVE-2024-1979 affects Quarkus with an information leak in the quarkus-kubernetes-deployment component related to annotation handling. The Red Hat advisory RHSA-2024:1662 lists CVE-2024-1979 as a security fix affecting the Red Hat build of Quarkus, specifically noting a security update for Quarkus...

3.5CVSS4.1AI score0.006EPSS
SaveExploits0References4
OSV
OSV
•added 2024/03/13 9:41 a.m.•12 views

CVE-2024-1979 Quarkus: information leak in annotation

A vulnerability was found in Quarkus. In certain conditions related to the CI process, git credentials could be inadvertently published, which could put the git repository at risk...

3.5CVSS5.9AI score
SaveExploits0References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/03/13 12:00 a.m.•5 views

CVE-2024-1979: Exposure of Sensitive Information to an Unauthorized Actor

A vulnerability was found in Quarkus. In certain conditions related to the CI process, git credentials could be inadvertently published, which could put the git repository at risk...

3.5CVSS5.8AI score0.006EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2024/03/05 9:30 p.m.•23 views

CVE-2024-1979

A vulnerability was found in Quarkus. In certain conditions related to the CI process, git credentials could be inadvertently published, which could put the git repository at risk. Mitigation Ensure that at least one of the preconditions is not present in your environment...

3.5CVSS3.9AI score0.006EPSS
SaveExploits0References4
SUSE CVE
SUSE CVE
•added 2023/03/10 4:02 a.m.•12 views

SUSE CVE-2023-26054

BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner. In affected versions when the user sends a build request that contains a Git URL that contains credentials and the build creates a provenance attestation describing that build,...

6.5CVSS6.8AI score0.01026EPSS
SaveExploits1References3
OSV
OSV
•added 2023/03/06 7:15 p.m.•14 views

UBUNTU-CVE-2023-26054

BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner. In affected versions when the user sends a build request that contains a Git URL that contains credentials and the build creates a provenance attestation describing that build,...

6.5CVSS7AI score0.01026EPSS
SaveExploits1References6
Positive Technologies
Positive Technologies
•added 2023/03/06 12:00 a.m.•16 views

PT-2023-20454

Name of the Vulnerable Software and Affected Versions BuildKit versions v0.11.0 through v0.11.3 Description The issue arises when a build request contains a Git URL with credentials and creates a provenance attestation describing the build. These credentials could be visible from the provenance...

6.5CVSS6.2AI score0.01026EPSS
SaveExploits1References125
SUSE CVE
SUSE CVE
•added 2023/02/15 5:14 a.m.•9 views

SUSE CVE-2015-6918

salt before 2015.5.5 leaks git usernames and passwords to the log...

6.3CVSS7AI score0.01238EPSS
SaveExploits0References4
SUSE CVE
SUSE CVE
•added 2023/02/15 4:00 a.m.•9 views

SUSE CVE-2020-11008

Affected versions of Git have a vulnerability whereby Git can be tricked into sending private credentials to a host controlled by an attacker. This bug is similar to CVE-2020-5260GHSA-qm7j-c969-7j4q. The fix for that bug still left the door open for an exploit where some credential is leaked but...

5.3CVSS7AI score0.03867EPSS
SaveExploits0References8
SUSE CVE
SUSE CVE
•added 2023/02/15 3:22 a.m.•9 views

SUSE CVE-2022-43756

A Improper Neutralization of Special Elements in Output Used by a Downstream Component 'Injection' vulnerability in SUSE Rancher allows remote attackers to cause denial of service by supplying specially crafted git credentials. This issue affects: SUSE Rancher wrangler version 0.7.3 and prior...

7.5CVSS7.2AI score0.00684EPSS
SaveExploits0References4
NVD
NVD
•added 2023/02/07 1:15 p.m.•40 views

CVE-2022-43756

A Improper Neutralization of Special Elements in Output Used by a Downstream Component 'Injection' vulnerability in SUSE Rancher allows remote attackers to cause denial of service by supplying specially crafted git credentials. This issue affects: SUSE Rancher wrangler version 0.7.3 and prior...

7.5CVSS6.1AI score0.00684EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/02/07 12:00 a.m.•0 views

CVE-2022-43756: Improper Neutralization of Special Elements in Output Used by a Downstream Component

A Improper Neutralization of Special Elements in Output Used by a Downstream Component 'Injection' vulnerability in SUSE Rancher allows remote attackers to cause denial of service by supplying specially crafted git credentials. This issue affects: SUSE Rancher wrangler version 0.7.3 and prior...

7.5CVSS5.8AI score0.00684EPSS
SaveExploits0References2
Rows per page
Query Builder