TI-2024-21101 CVE-2024-32002
Git's recursive clones on case-insensitive filesystems that support symlinks are susceptible to Remote Code Execution
Priority HIGH 74
Git is a revision control system.
Git
Records32All Threatist records
Exploited (KEV)1In CISA KEV
CVSS critical5CVSS 9.0–10.0
CVSS high18CVSS 7.0–8.9
Exploited now
Git records in CISA KEVComponents
Products in the NVD configurations · select one to filter the recordsRecords
13 records in Git · all components
TI-2020-04316 CVE-2020-5260
malicious URLs may cause Git to present stored credentials to the wrong server
Priority MEDIUM 56
Affected versions of Git have a vulnerability whereby Git can be tricked into sending private credentials to a host controlled by an attacker.
TI-2022-09232 CVE-2022-25648 · GHSA-69p6-wvmq-27gg
Command injection in git
Priority MEDIUM 50
The package git before 1.11.0 are vulnerable to Command Injection via git argument injection.
TI-2008-05233 CVE-2008-5517 · GHSA-9mgx-58pm-mc68
The web interface in git (gitweb) 1.5.x before 1.5.6 allows remote attackers to execute…
Priority MEDIUM 47
The web interface in git (gitweb) 1.5.x before 1.5.6 allows remote attackers to execute arbitrary commands via shell metacharacters related to (1) git_snapshot and (2) git_object.
TI-2008-05232 CVE-2008-5516 · GHSA-932q-24j4-3r46
The web interface in git (gitweb) 1.5.x before 1.5.5 allows remote attackers to execute…
Priority MEDIUM 40
The web interface in git (gitweb) 1.5.x before 1.5.5 allows remote attackers to execute arbitrary commands via shell metacharacters related to git_search.
TI-2008-03393 CVE-2008-3546 · GHSA-j9cr-wr26-g3fp
Stack-based buffer overflow in the (1) diff_addremove and (2) diff_change functions in…
Priority MEDIUM 40
Stack-based buffer overflow in the (1) diff_addremove and (2) diff_change functions in GIT before 1.5.6.4 might allow local users to execute arbitrary code via a PATH whose length is larger than the system's PATH_MAX whe…
TI-2006-00463 CVE-2006-0477 · GHSA-mr6x-qh8f-pvw6
Buffer overflow in git-checkout-index in GIT before 1.1.5 allows remote attackers to…
Priority LOW 39
Buffer overflow in git-checkout-index in GIT before 1.1.5 allows remote attackers to execute arbitrary code via an index file with a long symbolic link.
Priority LOW 35
Git is a source code management tool.
TI-2009-02015 CVE-2009-2108 · GHSA-wfjh-r5w7-m7m6
git-daemon in git 1.4.4.5 through 1.6.3 allows remote attackers to cause a denial of…
Priority LOW 32
git-daemon in git 1.4.4.5 through 1.6.3 allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a request containing extra unrecognized arguments.
TI-2010-03711 CVE-2010-3906 · GHSA-3mrf-mhch-542p
Cross-site scripting (XSS) vulnerability in Gitweb 1.7.3.3 and earlier allows remote…
Priority LOW 29
Cross-site scripting (XSS) vulnerability in Gitweb 1.7.3.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the (1) f and (2) fp parameters.
TI-2008-05612 CVE-2008-5916 · GHSA-52fx-g623-mw3m
gitweb/gitweb.perl in gitweb in Git 1.6.x before 1.6.0.6, 1.5.6.x before 1.5.6.6, 1.5.5.x…
Priority LOW 22
gitweb/gitweb.perl in gitweb in Git 1.6.x before 1.6.0.6, 1.5.6.x before 1.5.6.6, 1.5.5.x before 1.5.5.6, 1.5.4.x before 1.5.4.7, and other versions after 1.4.3 allows local repository owners to execute arbitrary command…
TI-2024-34893 CVE-2024-52006
Newline confusion in credential helpers can lead to credential exfiltration in git
Priority LOW 13
Git is a fast, scalable, distributed revision control system with an unusually rich command set that provides both high-level operations and full access to internals.
Priority LOW 12
Git is a fast, scalable, distributed revision control system with an unusually rich command set that provides both high-level operations and full access to internals.