15694 matches found
CVE-2024-21533: Improper Neutralization of Argument Delimiters in a Command
All versions of the package ggit are vulnerable to Arbitrary Argument Injection via the clone API, which allows specifying the remote URL to clone and the file on disk to clone to. The library does not sanitize for user input or validate a given URL scheme, nor does it properly pass command-line...
RHSA-2024:7701 Red Hat Security Advisory: git security update
Bulletin has no description...
Command Injection
git-shallow-clone is vulnerable to Command injection. The vulnerability is due to missing sanitization or mitigation flags in the process variable of the gitShallowClone function. which allows malicious inputs to be executed as system commands...
git: RCE while cloning local repos
A vulnerability was found in Git. This vulnerability can be exploited by an unauthenticated attacker who places a specialized repository on the target's local system. If the victim clones this repository, the attacker can execute arbitrary code...
Important: Red Hat Security Advisory: git security update
An update for git is now available for Red Hat Enterprise Linux 8.2 Advanced Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for eac...
RHEL 8 : git (RHSA-2024:7701)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:7701 advisory. Git is a distributed revision control system with a decentralized architecture. As opposed to centralized version control systems with a client-serve...
GHSA-FM76-W8JW-XF8M @saltcorn/plugins-loader unsanitized plugin name leads to a remote code execution (RCE) vulnerability when creating plugins using git source
Summary When creating a new plugin using the git source, the user-controlled value req.body.name is used to build the plugin directory where the location will be cloned. The API used to execute the git clone command with the user-controlled data is childprocess.execSync. Since the user-controlled...
io.relution.jenkins:scm-sqs (>=1.2, <=1.4), org.jenkins-ci.main:jenkins-test-harness (1.626) +6 more potentially affected by CVE-2024-47803 via org.jenkins-ci.main:jenkins-core (1.626)
org.jenkins-ci.main:jenkins-core MAVEN version 1.626 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - io.relution.jenkins:scm-sqs =1.2, =0.1, =0.2, =0.1, =1.21, =1.24 Source cves: CVE-2024-47803...
org.jenkins-ci.main:jenkins-test-harness (1.565.1), org.jenkins-ci.main:jenkins-war (1.565.1) +10 more potentially affected by CVE-2024-47804 via org.jenkins-ci.main:jenkins-core (1.565.1)
org.jenkins-ci.main:jenkins-core MAVEN version 1.565.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.565.1 - org.jenkins-ci.main:jenkins-war 1.565.1 -...
org.jenkins-ci.main:jenkins-test-harness (1.580.2), org.jenkins-ci.main:jenkins-war (1.580.2) +3 more potentially affected by CVE-2024-47804 via org.jenkins-ci.main:jenkins-core (1.580.2)
org.jenkins-ci.main:jenkins-core MAVEN version 1.580.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.580.2 - org.jenkins-ci.main:jenkins-war 1.580.2 -...
com.parallels:parallels-desktop (>=0.4, <=0.6), org.fedoraproject.jenkins.plugins:copr (0.6.1) +7 more potentially affected by CVE-2024-47803 via org.jenkins-ci.main:jenkins-core (1.651.1)
org.jenkins-ci.main:jenkins-core MAVEN version 1.651.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.parallels:parallels-desktop =0.4, =1.6, =0.7.0, =0.8.1 Source cves: CVE-2024-47803 Source...
org.jenkins-ci.plugins:git (>=1.6.0-beta-1, <=2.0-beta-2), org.jenkins-ci.plugins:mercurial (>=1.47, <=1.48) +1 more potentially affected by CVE-2024-47805 via org.jenkins-ci.plugins:credentials (1.7.6)
org.jenkins-ci.plugins:credentials MAVEN version 1.7.6 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:credentials and may be impacted: - org.jenkins-ci.plugins:git =1.6.0-beta-1, =1.47, =1.48 -...
org.biouno:uno-choice (>=1.0, <=1.4), org.jenkins-ci.plugins:git (2.0.1) +4 more potentially affected by CVE-2024-47805 via org.jenkins-ci.plugins:credentials (1.9.3)
org.jenkins-ci.plugins:credentials MAVEN version 1.9.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:credentials and may be impacted: - org.biouno:uno-choice =1.0, =1.8.3, =1.8.5 - org.jenkins-ci.plugins:scriptler 2.7 -...
org.jenkins-ci.plugins:bitbucket-approve (>=1.0.1, <=1.0.3), org.jenkins-ci.plugins:git (>=2.2.10, <=2.3.2) +1 more potentially affected by CVE-2024-47805 via org.jenkins-ci.plugins:credentials (1.19)
org.jenkins-ci.plugins:credentials MAVEN version 1.19 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:credentials and may be impacted: - org.jenkins-ci.plugins:bitbucket-approve =1.0.1, =2.2.10, =1.1.0, =1.1.4 Source cves:...
org.jenkins-ci.plugins:credentials-binding (>=1.3, <=1.5), org.jenkins-ci.plugins:git (>=2.2.11, <=2.3.4) +2 more potentially affected by CVE-2024-47805 via org.jenkins-ci.plugins:credentials (1.20)
org.jenkins-ci.plugins:credentials MAVEN version 1.20 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:credentials and may be impacted: - org.jenkins-ci.plugins:credentials-binding =1.3, =2.2.11, =0.0.1-beta7, =0.0.1-beta12 -...
com.coravy.hudson.plugins.github:github (>=1.23.0, <=1.29.4), org.jenkins-ci.plugins:git (>=3.0.1, <=3.2.0) +5 more potentially affected by CVE-2024-47805 via org.jenkins-ci.plugins:credentials (2.1.8)
org.jenkins-ci.plugins:credentials MAVEN version 2.1.8 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:credentials and may be impacted: - com.coravy.hudson.plugins.github:github =1.23.0, =3.0.1, =2.9, =2.0.0, =0.5, =0.6 Source...
RHSA-2024:3346 Red Hat Security Advisory: git-lfs security update
Bulletin has no description...
RHSA-2024:2724 Red Hat Security Advisory: git-lfs security update
Bulletin has no description...