CVE-2024-45189

Mage AI is affected by a path traversal vulnerability in the Git Content request that allows remote users with the Viewer role to leak arbitrary files from the Mage server. The issue is documented across multiple sources (CVE-2024-45189, related advisories) and is characterized by improper input ...

CVE-2024-45189

Mage AI allows remote users with the "Viewer" role to leak arbitrary files from the Mage server due to a path traversal in the "Git Content" request...

CVE-2024-45189 Mage AI git content request remote arbitrary file leak

Mage AI allows remote users with the "Viewer" role to leak arbitrary files from the Mage server due to a path traversal in the "Git Content" request...

CVE-2024-45189: Improper Limitation of a Pathname to a Restricted Directory

Mage AI allows remote users with the "Viewer" role to leak arbitrary files from the Mage server due to a path traversal in the "Git Content" request...

mage-ai security vulnerability

mage-ai is a modern alternative to Airflow open sourced by Mage. A security vulnerability exists in mage-ai that stems from a path traversal vulnerability that allows a remote user with the Viewer role to disclose arbitrary files from the Mage server via a Git Content request...

PT-2024-31471

Name of the Vulnerable Software and Affected Versions Mage AI affected versions not specified Description The issue allows remote users with the "Viewer" role to leak arbitrary files from the Mage server due to a path traversal in the "Git Content" request. This can potentially lead to remote...

GO-2022-0562 Path Traversal in Git HTTP endpoints in Gogs in gogs.io/gogs

Path Traversal in Git HTTP endpoints in Gogs in gogs.io/gogs...

GO-2022-0424 On Windows, `git-sizer` might run a `git` executable within the repository being analyzed in github.com/github/git-sizer

On Windows, git-sizer might run a git executable within the repository being analyzed in github.com/github/git-sizer...

GO-2022-0395 GitHub CLI can execute a git binary from the current directory in github.com/cli/cli

GitHub CLI can execute a git binary from the current directory in github.com/cli/cli...

SUSE: Security Advisory (SUSE-SU-2024:1854-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Exploit for Unrestricted Upload of File with Dangerous Type in Git

CVE-2024-32002 RCE PoC Overview This repository contains...

git:fuzz-commit-graph: Crash in fuzz-commit-graph

Project: https://github.com/git/git.git Detailed Report: https://oss-fuzz.com/testcase?key=5387331404627968 Project: git Fuzzing Engine: libFuzzer Fuzz Target: fuzz-commit-graph Job Type: libfuzzerasangit Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x61f000001000 Crash State:...

CBL Mariner 2.0 Security Update: packer (CVE-2023-49569)

The version of packer installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-49569 advisory. - A path traversal vulnerability was discovered in go-git versions prior to v5.11. This vulnerability allows a...

CBL Mariner 2.0 Security Update: packer (CVE-2023-49568)

The version of packer installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-49568 advisory. - A denial of service DoS vulnerability was discovered in go-git versions prior to v5.11. This vulnerability...

BIT-GITLAB-2024-3958 Improper Control of Generation of Code ('Code Injection') in GitLab

An issue has been discovered in GitLab CE/EE affecting all versions before 17.0.6, 17.1 prior to 17.1.4, and 17.2 prior to 17.2.2. An issue was found that allows someone to abuse a discrepancy between the Web application display and the git command line interface to social engineer victims into...

Git-Syncing into Trouble: Exploring Command Injection Flaws in Kubernetes

...

Git-Syncing into Trouble: Exploring Command Injection Flaws in Kubernetes

...

Huawei EulerOS: Security Advisory for git (EulerOS-SA-2024-2081)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for git (EulerOS-SA-2024-2098)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

WinSCP < 6.3.3 Key Recovery Attack Vulnerability

The version of WinSCP installed on the remote Windows host is prior to 6.3.3. It is, therefore, affected by a key recovery attack vulnerability. In PuTTY 0.68 through 0.80 before 0.81, biased ECDSA nonce generation allows an attacker to recover a user's NIST P-521 secret key via a quick attack in...