git-clone project git-clone vulnerabilities and exploits

(subscribe to this query)

9.8

CVSSv3

All versions of package git-clone are vulnerable to Command Injection due to insecure usage of the --upload-pack feature of git.

Git-clone Project Git-clone

9.8

CVSSv3

The package git-pull-or-clone prior to 2.0.2 are vulnerable to Command Injection due to the use of the --upload-pack feature of git which is also supported for git clone. The source includes the use of the secure child process API spawn(). However, the outpath parameter passed to...

Git-pull-or-clone Project Git-pull-or-clone

7.5

CVSSv3

webcheckout in myrepos up to and including 1.20171231 does not sanitize URLs that are passed to git clone, allowing a malicious website operator or a MitM malicious user to take advantage of it for arbitrary code execution, as demonstrated by an "ext::sh -c" attack or a...

Myrepos Project Myrepos

9.8

CVSSv3

Command Injection vulnerability in git-interface@2.1.1 in GitHub repository yarkeev/git-interface before 2.1.2. If both are provided by user input, then the use of a `--upload-pack` command-line argument feature of git is also supported for `git clone`, which would then allow for...

Git-interface Project Git-interface

9.8

CVSSv3

The package simple-git prior to 3.5.0 are vulnerable to Command Injection due to an incomplete fix of [CVE-2022-24433](https://security.snyk.io/vuln/SNYK-JS-SIMPLEGIT-2421199) which only patches against the git fetch attack vector. A similar use of the --upload-pack feature of gi...

Simple-git Project Simple-git

7.5

CVSSv3

Affected versions of Git have a vulnerability whereby Git can be tricked into sending private credentials to a host controlled by an attacker. Git uses external "credential helper" programs to store and retrieve passwords or other credentials from secure storage provide...

Git Git Git-scm Git Debian Debian Linux 8.0 Canonical Ubuntu Linux 16.04 Debian Debian Linux 9.0 Debian Debian Linux 10.0 Canonical Ubuntu Linux 18.04 Fedoraproject Fedora 30 Opensuse Leap 15.1 Canonical Ubuntu Linux 19.10 Fedoraproject Fedora 31 Fedoraproject Fedora 32

2 Github repositories

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook