Priority CRITICAL 94KEV
Git is a fast, scalable, distributed revision control system with an unusually rich command set that provides both high-level operations and full access to internals.
Git
Records32All Threatist records
Exploited (KEV)1In CISA KEV
CVSS critical5CVSS 9.0–10.0
CVSS high18CVSS 7.0–8.9
Exploited now
Git records in CISA KEVComponents
Products in the NVD configurations · select one to filter the recordsRecords
32 records
TI-2022-07580 CVE-2022-23521
gitattributes parsing integer overflow in git
Priority HIGH 82
Git is distributed revision control system.
TI-2022-20244 CVE-2022-41903
Integer overflow in `git archive`, `git log --format` leading to RCE in git
Priority HIGH 78
Git is distributed revision control system.
Priority HIGH 77
Git is an open-source distributed revision control system.
TI-2024-21101 CVE-2024-32002
Git's recursive clones on case-insensitive filesystems that support symlinks are susceptible to Remote Code Execution
Priority HIGH 74
Git is a revision control system.
Priority HIGH 71
Git is a revision control system.
TI-2024-21116 CVE-2024-32021
Local Git clone may hardlink arbitrary user-readable files into the new repository's "objects/" directory
Priority MEDIUM 64
Git is a revision control system.
TI-2020-04316 CVE-2020-5260
malicious URLs may cause Git to present stored credentials to the wrong server
Priority MEDIUM 56
Affected versions of Git have a vulnerability whereby Git can be tricked into sending private credentials to a host controlled by an attacker.
TI-2017-05942 CVE-2017-8386 · GHSA-xqh5-ghjx-6xv5
git-shell in git before 2.4.12, 2.5.x before 2.5.6, 2.6.x before 2.6.7, 2.7.x before…
Priority MEDIUM 52
git-shell in git before 2.4.12, 2.5.x before 2.5.6, 2.6.x before 2.6.7, 2.7.x before 2.7.5, 2.8.x before 2.8.5, 2.9.x before 2.9.4, 2.10.x before 2.10.3, 2.11.x before 2.11.2, and 2.12.x before 2.12.3 might allow remote…
TI-2022-09232 CVE-2022-25648 · GHSA-69p6-wvmq-27gg
Command injection in git
Priority MEDIUM 50
The package git before 1.11.0 are vulnerable to Command Injection via git argument injection.
TI-2008-05233 CVE-2008-5517 · GHSA-9mgx-58pm-mc68
The web interface in git (gitweb) 1.5.x before 1.5.6 allows remote attackers to execute…
Priority MEDIUM 47
The web interface in git (gitweb) 1.5.x before 1.5.6 allows remote attackers to execute arbitrary commands via shell metacharacters related to (1) git_snapshot and (2) git_object.
Priority MEDIUM 45
Git is a revision control system.
TI-2022-18636 CVE-2022-39260
Git vulnerable to Remote Code Execution via Heap overflow in `git shell`
Priority MEDIUM 45
Git is an open source, scalable, distributed revision control system.
Priority MEDIUM 41
Git is a fast, scalable, distributed revision control system with an unusually rich command set that provides both high-level operations and full access to internals.
Priority MEDIUM 41
Git, a revision control system, is vulnerable to path traversal prior to versions 2.39.2, 2.38.4, 2.37.6, 2.36.5, 2.35.7, 2.34.7, 2.33.7, 2.32.6, 2.31.7, and 2.30.8.
TI-2024-21103 CVE-2024-32004
Git vulnerable to Remote Code Execution while cloning special-crafted local repositories
Priority MEDIUM 40
Git is a revision control system.
TI-2008-05232 CVE-2008-5516 · GHSA-932q-24j4-3r46
The web interface in git (gitweb) 1.5.x before 1.5.5 allows remote attackers to execute…
Priority MEDIUM 40
The web interface in git (gitweb) 1.5.x before 1.5.5 allows remote attackers to execute arbitrary commands via shell metacharacters related to git_search.
TI-2008-03393 CVE-2008-3546 · GHSA-j9cr-wr26-g3fp
Stack-based buffer overflow in the (1) diff_addremove and (2) diff_change functions in…
Priority MEDIUM 40
Stack-based buffer overflow in the (1) diff_addremove and (2) diff_change functions in GIT before 1.5.6.4 might allow local users to execute arbitrary code via a PATH whose length is larger than the system's PATH_MAX whe…
TI-2020-08882 CVE-2020-11008
Malicious URLs can still cause Git to send a stored credential to the wrong server
Priority LOW 39
Affected versions of Git have a vulnerability whereby Git can be tricked into sending private credentials to a host controlled by an attacker.
TI-2006-00463 CVE-2006-0477 · GHSA-mr6x-qh8f-pvw6
Buffer overflow in git-checkout-index in GIT before 1.1.5 allows remote attackers to…
Priority LOW 39
Buffer overflow in git-checkout-index in GIT before 1.1.5 allows remote attackers to execute arbitrary code via an index file with a long symbolic link.
Priority LOW 38
Git is a revision control system.
Priority LOW 35
Git is a source code management tool.
TI-2022-11730 CVE-2022-29187
Bypass of safe.directory protections in Git
Priority LOW 34
Git is a distributed revision control system.
TI-2009-02015 CVE-2009-2108 · GHSA-wfjh-r5w7-m7m6
git-daemon in git 1.4.4.5 through 1.6.3 allows remote attackers to cause a denial of…
Priority LOW 32
git-daemon in git 1.4.4.5 through 1.6.3 allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a request containing extra unrecognized arguments.
TI-2010-03711 CVE-2010-3906 · GHSA-3mrf-mhch-542p
Cross-site scripting (XSS) vulnerability in Gitweb 1.7.3.3 and earlier allows remote…
Priority LOW 29
Cross-site scripting (XSS) vulnerability in Gitweb 1.7.3.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the (1) f and (2) fp parameters.