Read the docs

Git-pull-or-clone Project

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Git-pull-or-clone Project records in CISA KEV

No Git-pull-or-clone Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Git-pull-or-clone 1 record MEDIUM

Records

1 record

TI-2022-08310 CVE-2022-24437 · GHSA-3x62-x456-q2vm

Command injection in git-pull-or-clone

Priority MEDIUM 48

The package git-pull-or-clone before 2.0.2 are vulnerable to Command Injection due to the use of the --upload-pack feature of git which is also supported for git clone.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.03738 Published 2022-05-01 Fixed in 2.0.2 CWE-88
Open these records in search →