Git Project

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical3CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Git Project records in CISA KEV

No Git Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Git 3 records MEDIUM

Records

3 records in Git · all components

TI-2015-06272 CVE-2015-7545 · GHSA-3rvg-chjx-7h2j

The (1) git-remote-ext and (2) unspecified other remote helper programs in Git before…

MEDIUM 60

The (1) git-remote-ext and (2) unspecified other remote helper programs in Git before 2.3.10, 2.4.x before 2.4.10, 2.5.x before 2.5.4, and 2.6.x before 2.6.1 do not properly restrict the allowed protocols, which might al…

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.18672 Published 2016-04-13 Fixed CWE-20

TI-2021-06173 CVE-2021-23632 · GHSA-9gqr-xp86-f87h

Remote code execution (RCE) in git

MEDIUM 47

All versions of package git are vulnerable to Remote Code Execution (RCE) due to missing sanitization in the Git.git method, which allows execution of OS commands rather than just git commands.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0235 Published 2022-03-17 No fix listed CWE-78

TI-2015-05914 CVE-2015-7082 · GHSA-v284-mh6m-834f

Multiple unspecified vulnerabilities in Git before 2.5.4, as used in Apple Xcode before…

MEDIUM 46

Multiple unspecified vulnerabilities in Git before 2.5.4, as used in Apple Xcode before 7.2, have unknown impact and attack vectors.

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.01679 Published 2015-12-11 No fix listed

Open these records in search →

Critical	3
High	0
Medium	0
Low	0
No CVSS	0