TI-2020-17007 CVE-2020-27955 · GHSA-4g4p-42wc-9f3m
Git LFS 2.12.0 allows Remote Code Execution.
Priority HIGH 83
Git LFS 2.12.0 allows Remote Code Execution.
Git Large File Storage Project
Records4All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9
Exploited now
Git Large File Storage Project records in CISA KEVNo Git Large File Storage Project vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
4 records in Git Large File Storage · all components
TI-2022-08639 CVE-2022-24826 · GHSA-6rw3-3whw-jvjj
Git LFS can execute a binary from the current directory on Windows
Priority MEDIUM 53
On Windows, if Git LFS operates on a malicious repository with a `..exe` file as well as a file named `git.exe`, and `git.exe` is not found in `PATH`, the `..exe` program will be executed, permitting the attacker to exec…
TI-2017-13068 CVE-2017-17831 · GHSA-w4xh-w33p-4v29
GitHub Git LFS before 2.1.1 allows remote attackers to execute arbitrary commands via an…
Priority MEDIUM 44
GitHub Git LFS before 2.1.1 allows remote attackers to execute arbitrary commands via an ssh URL with an initial dash character in the hostname, located on a "url =" line in a .lfsconfig file within a repository.
TI-2021-04340 CVE-2021-21237 · GHSA-cx3w-xqmc-84g5
Git LFS can execute a Git binary from the current directory on Windows
Priority LOW 34
Git LFS is a command line extension for managing large files with Git.