Git-pull-or-clone Project

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Git-pull-or-clone Project records in CISA KEV

No Git-pull-or-clone Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Git-pull-or-clone 1 record MEDIUM

Records

1 record in Git-pull-or-clone · all components

TI-2022-08310 CVE-2022-24437 · GHSA-3x62-x456-q2vm

Command injection in git-pull-or-clone

MEDIUM 48

The package git-pull-or-clone before 2.0.2 are vulnerable to Command Injection due to the use of the --upload-pack feature of git which is also supported for git clone.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.03738 Published 2022-05-01 Fixed in 2.0.2 CWE-88

Open these records in search →

Critical	1
High	0
Medium	0
Low	0
No CVSS	0