Git

CVEs (58)

• CVE-2022-23521Jan 17, 2023
  Git

  Git
  risk 0.05cvss —epss 0.56

  Git is distributed revision control system. gitattributes are a mechanism to allow defining attributes for paths. These attributes can be defined by adding a `.gitattributes` file to the repository, which contains a set of file patterns and the attributes that should be set for…

• CVE-2023-25652Apr 25, 2023
  Git

  Git
  risk 0.04cvss —epss 0.52

  Git is a revision control system. Prior to versions 2.30.9, 2.31.8, 2.32.7, 2.33.8, 2.34.8, 2.35.8, 2.36.6, 2.37.7, 2.38.5, 2.39.3, and 2.40.1, by feeding specially crafted input to `git apply --reject`, a path outside the working tree can be overwritten with partially…

• CVE-2022-41903Jan 17, 2023
  Git

  Git
  risk 0.04cvss —epss 0.44

  Git is distributed revision control system. `git log` can display commits in an arbitrary format using its `--format` specifiers. This functionality is also exposed to `git archive` via the `export-subst` gitattribute. When processing the padding operators, there is a integer…

• CVE-2008-5517Jan 13, 2009
  Git

  Git
  risk 0.04cvss —epss 0.12

  The web interface in git (gitweb) 1.5.x before 1.5.6 allows remote attackers to execute arbitrary commands via shell metacharacters related to (1) git_snapshot and (2) git_object.

• CVE-2010-3906Dec 17, 2010
  Git

  Git
  risk 0.03cvss —epss 0.06

  Cross-site scripting (XSS) vulnerability in Gitweb 1.7.3.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the (1) f and (2) fp parameters.

• CVE-2009-2108Jun 18, 2009
  Git

  Git
  risk 0.03cvss —epss 0.06

  git-daemon in git 1.4.4.5 through 1.6.3 allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a request containing extra unrecognized arguments.

• CVE-2024-32002May 14, 2024
  Git

  Git
  risk 0.02cvss —epss 0.25

  Git is a revision control system. Prior to versions 2.45.1, 2.44.1, 2.43.4, 2.42.2, 2.41.1, 2.40.2, and 2.39.4, repositories with submodules can be crafted in a way that exploits a bug in Git whereby it can be fooled into writing files not into the submodule's worktree but into…

• CVE-2024-52005Jan 15, 2025
  Git

  Git
  risk 0.00cvss —epss 0.00

  Git is a source code management tool. When cloning from a server (or fetching, or pushing), informational or error messages are transported from the remote Git process to the client via the so-called "sideband channel". These messages will be prefixed with "remote:" and printed…

• CVE-2024-50349Jan 14, 2025
  Git

  Git
  risk 0.00cvss —epss 0.01

  Git is a fast, scalable, distributed revision control system with an unusually rich command set that provides both high-level operations and full access to internals. When Git asks for credentials via a terminal prompt (i.e. without using any credential helper), it prints out…

• CVE-2024-52006Jan 14, 2025
  Git

  Git
  risk 0.00cvss —epss 0.01

  Git is a fast, scalable, distributed revision control system with an unusually rich command set that provides both high-level operations and full access to internals. Git defines a line-based protocol that is used to exchange information between Git and Git credential helpers.…

• CVE-2024-32465May 14, 2024
  Git

  Git
  risk 0.00cvss —epss 0.01

  Git is a revision control system. The Git project recommends to avoid working in untrusted repositories, and instead to clone it first with `git clone --no-local` to obtain a clean copy. Git has specific protections to make that a safe operation even with an untrusted source…

• CVE-2024-32021May 14, 2024
  Git

  Git
  risk 0.00cvss —epss 0.01

  Git is a revision control system. Prior to versions 2.45.1, 2.44.1, 2.43.4, 2.42.2, 2.41.1, 2.40.2, and 2.39.4, when cloning a local source repository that contains symlinks via the filesystem, Git may create hardlinks to arbitrary user-readable files on the same filesystem as…

• CVE-2024-32020May 14, 2024
  Git

  Git
  risk 0.00cvss —epss 0.01

  Git is a revision control system. Prior to versions 2.45.1, 2.44.1, 2.43.4, 2.42.2, 2.41.1, 2.40.2, and 2.39.4, local clones may end up hardlinking files into the target repository's object database when source and target repository reside on the same disk. If the source…

• CVE-2024-32004May 14, 2024
  Git

  Git
  risk 0.00cvss —epss 0.01

  Git is a revision control system. Prior to versions 2.45.1, 2.44.1, 2.43.4, 2.42.2, 2.41.1, 2.40.2, and 2.39.4, an attacker can prepare a local repository in such a way that, when cloned, will execute arbitrary code during the operation. The problem has been patched in versions…

• CVE-2023-29007Apr 25, 2023
  Git

  Git
  risk 0.00cvss —epss 0.06

  Git is a revision control system. Prior to versions 2.30.9, 2.31.8, 2.32.7, 2.33.8, 2.34.8, 2.35.8, 2.36.6, 2.37.7, 2.38.5, 2.39.3, and 2.40.1, a specially crafted `.gitmodules` file with submodule URLs that are longer than 1024 characters can used to exploit a bug in…

• CVE-2023-23946Feb 14, 2023
  Git

  Git
  risk 0.00cvss —epss 0.01

  Git, a revision control system, is vulnerable to path traversal prior to versions 2.39.2, 2.38.4, 2.37.6, 2.36.5, 2.35.7, 2.34.7, 2.33.7, 2.32.6, 2.31.7, and 2.30.8. By feeding a crafted input to `git apply`, a path outside the working tree can be overwritten as the user who is…

• CVE-2023-22490Feb 14, 2023
  Git

  Git
  risk 0.00cvss —epss 0.01

  Git is a revision control system. Using a specially-crafted repository, Git prior to versions 2.39.2, 2.38.4, 2.37.6, 2.36.5, 2.35.7, 2.34.7, 2.33.7, 2.32.6, 2.31.7, and 2.30.8 can be tricked into using its local clone optimization even when using a non-local transport. Though…

• CVE-2022-39260Oct 19, 2022
  Git

  Git
  risk 0.00cvss —epss 0.03

  Git is an open source, scalable, distributed revision control system. `git shell` is a restricted login shell that can be used to implement Git's push/pull functionality via SSH. In versions prior to 2.30.6, 2.31.5, 2.32.4, 2.33.5, 2.34.5, 2.35.5, 2.36.3, and 2.37.4, the…

• CVE-2022-39253Oct 19, 2022
  Git

  Git
  risk 0.00cvss —epss 0.01

  Git is an open source, scalable, distributed revision control system. Versions prior to 2.30.6, 2.31.5, 2.32.4, 2.33.5, 2.34.5, 2.35.5, 2.36.3, and 2.37.4 are subject to exposure of sensitive information to a malicious actor. When performing a local clone (where the source and…

• CVE-2022-29187Jul 12, 2022
  Git

  Git
  risk 0.00cvss —epss 0.00

  Git is a distributed revision control system. Git prior to versions 2.37.1, 2.36.2, 2.35.4, 2.34.4, 2.33.4, 2.32.3, 2.31.4, and 2.30.5, is vulnerable to privilege escalation in all platforms. An unsuspecting user could still be affected by the issue reported in CVE-2022-24765,…