gitweb/gitweb.perl in gitweb in Git 1.6.x before 1.6.0.6, 1.5.6.x before 1.5.6.6, 1.5.5.x…
Priority LOW 22CWE-264Published · Updated
Key facts
- Attack vector
- Local
- Privileges required
- None
- User interaction
- — Not recorded in CVSS 2.0
- Attack complexity
- Low
- Impact type
- Security bypass
- Confidentiality · integrity · availability
- Partial · Partial · Partial
- Fix status
- No fix listed
Attack profile from CVSS 2.0 · NVD. Fix status from CNA. Impact type from CWE-264.
Summary
gitweb/gitweb.perl in gitweb in Git 1.6.x before 1.6.0.6, 1.5.6.x before 1.5.6.6, 1.5.5.x before 1.5.5.6, 1.5.4.x before 1.5.4.7, and other versions after 1.4.3 allows local repository owners to execute arbitrary commands by modifying the diff.external configuration variable and executing a crafted gitweb query.
Why it matters now
EPSS 0.00458 39th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | — | all versions | — | No fix listed | CNA |
- — Vendor— Affected all versions Fixed in — No fix listed CNA
CPE configurations NVD · 85
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:git:git:1.4.3.1:*:*:*:*:*:*:* | 1.4.3.1 | Vulnerable | Git |
| cpe:2.3:a:git:git:1.4.3.2:*:*:*:*:*:*:* | 1.4.3.2 | Vulnerable | Git |
| cpe:2.3:a:git:git:1.4.3.3:*:*:*:*:*:*:* | 1.4.3.3 | Vulnerable | Git |
| cpe:2.3:a:git:git:1.4.3.4:*:*:*:*:*:*:* | 1.4.3.4 | Vulnerable | Git |
| cpe:2.3:a:git:git:1.4.3.5:*:*:*:*:*:*:* | 1.4.3.5 | Vulnerable | Git |
| cpe:2.3:a:git:git:1.4.4:*:*:*:*:*:*:* | 1.4.4 | Vulnerable | Git |
| cpe:2.3:a:git:git:1.4.4.1:*:*:*:*:*:*:* | 1.4.4.1 | Vulnerable | Git |
| cpe:2.3:a:git:git:1.4.4.2:*:*:*:*:*:*:* | 1.4.4.2 | Vulnerable | Git |
| cpe:2.3:a:git:git:1.4.4.3:*:*:*:*:*:*:* | 1.4.4.3 | Vulnerable | Git |
| cpe:2.3:a:git:git:1.4.4.4:*:*:*:*:*:*:* | 1.4.4.4 | Vulnerable | Git |
- cpe:2.3:a:git:git:1.4.3.1:*:*:*:*:*:*:* Versions 1.4.3.1 Vulnerable ·Git
- cpe:2.3:a:git:git:1.4.3.2:*:*:*:*:*:*:* Versions 1.4.3.2 Vulnerable ·Git
- cpe:2.3:a:git:git:1.4.3.3:*:*:*:*:*:*:* Versions 1.4.3.3 Vulnerable ·Git
- cpe:2.3:a:git:git:1.4.3.4:*:*:*:*:*:*:* Versions 1.4.3.4 Vulnerable ·Git
- cpe:2.3:a:git:git:1.4.3.5:*:*:*:*:*:*:* Versions 1.4.3.5 Vulnerable ·Git
- cpe:2.3:a:git:git:1.4.4:*:*:*:*:*:*:* Versions 1.4.4 Vulnerable ·Git
- cpe:2.3:a:git:git:1.4.4.1:*:*:*:*:*:*:* Versions 1.4.4.1 Vulnerable ·Git
- cpe:2.3:a:git:git:1.4.4.2:*:*:*:*:*:*:* Versions 1.4.4.2 Vulnerable ·Git
- cpe:2.3:a:git:git:1.4.4.3:*:*:*:*:*:*:* Versions 1.4.4.3 Vulnerable ·Git
- cpe:2.3:a:git:git:1.4.4.4:*:*:*:*:*:*:* Versions 1.4.4.4 Vulnerable ·Git
Show 75 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:git:git:1.5.0:*:*:*:*:*:*:* | 1.5.0 | Vulnerable | Git |
| cpe:2.3:a:git:git:1.5.0:rc2:*:*:*:*:*:* | 1.5.0 rc2 | Vulnerable | Git |
| cpe:2.3:a:git:git:1.5.0:rc3:*:*:*:*:*:* | 1.5.0 rc3 | Vulnerable | Git |
| cpe:2.3:a:git:git:1.5.0:rc4:*:*:*:*:*:* | 1.5.0 rc4 | Vulnerable | Git |
| cpe:2.3:a:git:git:1.5.0.1:*:*:*:*:*:*:* | 1.5.0.1 | Vulnerable | Git |
| cpe:2.3:a:git:git:1.5.0.2:*:*:*:*:*:*:* | 1.5.0.2 | Vulnerable | Git |
| cpe:2.3:a:git:git:1.5.0.3:*:*:*:*:*:*:* | 1.5.0.3 | Vulnerable | Git |
| cpe:2.3:a:git:git:1.5.0.4:*:*:*:*:*:*:* | 1.5.0.4 | Vulnerable | Git |
| cpe:2.3:a:git:git:1.5.0.5:*:*:*:*:*:*:* | 1.5.0.5 | Vulnerable | Git |
| cpe:2.3:a:git:git:1.5.0.6:*:*:*:*:*:*:* | 1.5.0.6 | Vulnerable | Git |
| cpe:2.3:a:git:git:1.5.0.7:*:*:*:*:*:*:* | 1.5.0.7 | Vulnerable | Git |
| cpe:2.3:a:git:git:1.5.1:*:*:*:*:*:*:* | 1.5.1 | Vulnerable | Git |
| cpe:2.3:a:git:git:1.5.1.1:*:*:*:*:*:*:* | 1.5.1.1 | Vulnerable | Git |
| cpe:2.3:a:git:git:1.5.1.2:*:*:*:*:*:*:* | 1.5.1.2 | Vulnerable | Git |
| cpe:2.3:a:git:git:1.5.1.3:*:*:*:*:*:*:* | 1.5.1.3 | Vulnerable | Git |
| cpe:2.3:a:git:git:1.5.1.4:*:*:*:*:*:*:* | 1.5.1.4 | Vulnerable | Git |
| cpe:2.3:a:git:git:1.5.1.5:*:*:*:*:*:*:* | 1.5.1.5 | Vulnerable | Git |
| cpe:2.3:a:git:git:1.5.1.6:*:*:*:*:*:*:* | 1.5.1.6 | Vulnerable | Git |
| cpe:2.3:a:git:git:1.5.2:*:*:*:*:*:*:* | 1.5.2 | Vulnerable | Git |
| cpe:2.3:a:git:git:1.5.2.1:*:*:*:*:*:*:* | 1.5.2.1 | Vulnerable | Git |
| cpe:2.3:a:git:git:1.5.2.2:*:*:*:*:*:*:* | 1.5.2.2 | Vulnerable | Git |
| cpe:2.3:a:git:git:1.5.2.3:*:*:*:*:*:*:* | 1.5.2.3 | Vulnerable | Git |
| cpe:2.3:a:git:git:1.5.2.4:*:*:*:*:*:*:* | 1.5.2.4 | Vulnerable | Git |
| cpe:2.3:a:git:git:1.5.2.5:*:*:*:*:*:*:* | 1.5.2.5 | Vulnerable | Git |
| cpe:2.3:a:git:git:1.5.3:*:*:*:*:*:*:* | 1.5.3 | Vulnerable | Git |
| cpe:2.3:a:git:git:1.5.3:rc4:*:*:*:*:*:* | 1.5.3 rc4 | Vulnerable | Git |
| cpe:2.3:a:git:git:1.5.3:rc5:*:*:*:*:*:* | 1.5.3 rc5 | Vulnerable | Git |
| cpe:2.3:a:git:git:1.5.3:rc7:*:*:*:*:*:* | 1.5.3 rc7 | Vulnerable | Git |
| cpe:2.3:a:git:git:1.5.3.1:*:*:*:*:*:*:* | 1.5.3.1 | Vulnerable | Git |
| cpe:2.3:a:git:git:1.5.3.2:*:*:*:*:*:*:* | 1.5.3.2 | Vulnerable | Git |
| cpe:2.3:a:git:git:1.5.3.3:*:*:*:*:*:*:* | 1.5.3.3 | Vulnerable | Git |
| cpe:2.3:a:git:git:1.5.3.4:*:*:*:*:*:*:* | 1.5.3.4 | Vulnerable | Git |
| cpe:2.3:a:git:git:1.5.3.5:*:*:*:*:*:*:* | 1.5.3.5 | Vulnerable | Git |
| cpe:2.3:a:git:git:1.5.3.6:*:*:*:*:*:*:* | 1.5.3.6 | Vulnerable | Git |
| cpe:2.3:a:git:git:1.5.3.7:*:*:*:*:*:*:* | 1.5.3.7 | Vulnerable | Git |
| cpe:2.3:a:git:git:1.5.3.8:*:*:*:*:*:*:* | 1.5.3.8 | Vulnerable | Git |
| cpe:2.3:a:git:git:1.5.4:*:*:*:*:*:*:* | 1.5.4 | Vulnerable | Git |
| cpe:2.3:a:git:git:1.5.4:rc0:*:*:*:*:*:* | 1.5.4 rc0 | Vulnerable | Git |
| cpe:2.3:a:git:git:1.5.4:rc1:*:*:*:*:*:* | 1.5.4 rc1 | Vulnerable | Git |
| cpe:2.3:a:git:git:1.5.4:rc1.1136.g2794:*:*:*:*:*:* | 1.5.4 rc1.1136.g2794 | Vulnerable | Git |
| cpe:2.3:a:git:git:1.5.4:rc2:*:*:*:*:*:* | 1.5.4 rc2 | Vulnerable | Git |
| cpe:2.3:a:git:git:1.5.4:rc3:*:*:*:*:*:* | 1.5.4 rc3 | Vulnerable | Git |
| cpe:2.3:a:git:git:1.5.4:rc4:*:*:*:*:*:* | 1.5.4 rc4 | Vulnerable | Git |
| cpe:2.3:a:git:git:1.5.4:rc5:*:*:*:*:*:* | 1.5.4 rc5 | Vulnerable | Git |
| cpe:2.3:a:git:git:1.5.4.1:*:*:*:*:*:*:* | 1.5.4.1 | Vulnerable | Git |
| cpe:2.3:a:git:git:1.5.4.2:*:*:*:*:*:*:* | 1.5.4.2 | Vulnerable | Git |
| cpe:2.3:a:git:git:1.5.4.3:*:*:*:*:*:*:* | 1.5.4.3 | Vulnerable | Git |
| cpe:2.3:a:git:git:1.5.4.4:*:*:*:*:*:*:* | 1.5.4.4 | Vulnerable | Git |
| cpe:2.3:a:git:git:1.5.4.5:*:*:*:*:*:*:* | 1.5.4.5 | Vulnerable | Git |
| cpe:2.3:a:git:git:1.5.4.6:*:*:*:*:*:*:* | 1.5.4.6 | Vulnerable | Git |
| cpe:2.3:a:git:git:1.5.5:*:*:*:*:*:*:* | 1.5.5 | Vulnerable | Git |
| cpe:2.3:a:git:git:1.5.5:rc1:*:*:*:*:*:* | 1.5.5 rc1 | Vulnerable | Git |
| cpe:2.3:a:git:git:1.5.5:rc2:*:*:*:*:*:* | 1.5.5 rc2 | Vulnerable | Git |
| cpe:2.3:a:git:git:1.5.5:rc3:*:*:*:*:*:* | 1.5.5 rc3 | Vulnerable | Git |
| cpe:2.3:a:git:git:1.5.5.1:*:*:*:*:*:*:* | 1.5.5.1 | Vulnerable | Git |
| cpe:2.3:a:git:git:1.5.5.2:*:*:*:*:*:*:* | 1.5.5.2 | Vulnerable | Git |
| cpe:2.3:a:git:git:1.5.5.3:*:*:*:*:*:*:* | 1.5.5.3 | Vulnerable | Git |
| cpe:2.3:a:git:git:1.5.5.3:r1:*:*:*:*:*:* | 1.5.5.3 r1 | Vulnerable | Git |
| cpe:2.3:a:git:git:1.5.5.4:*:*:*:*:*:*:* | 1.5.5.4 | Vulnerable | Git |
| cpe:2.3:a:git:git:1.5.5.5:*:*:*:*:*:*:* | 1.5.5.5 | Vulnerable | Git |
| cpe:2.3:a:git:git:1.5.6:*:*:*:*:*:*:* | 1.5.6 | Vulnerable | Git |
| cpe:2.3:a:git:git:1.5.6.1:*:*:*:*:*:*:* | 1.5.6.1 | Vulnerable | Git |
| cpe:2.3:a:git:git:1.5.6.2:*:*:*:*:*:*:* | 1.5.6.2 | Vulnerable | Git |
| cpe:2.3:a:git:git:1.5.6.3:*:*:*:*:*:*:* | 1.5.6.3 | Vulnerable | Git |
| cpe:2.3:a:git:git:1.5.6.4:*:*:*:*:*:*:* | 1.5.6.4 | Vulnerable | Git |
| cpe:2.3:a:git:git:1.5.6.5:*:*:*:*:*:*:* | 1.5.6.5 | Vulnerable | Git |
| cpe:2.3:a:git:git:1.6.0:*:*:*:*:*:*:* | 1.6.0 | Vulnerable | Git |
| cpe:2.3:a:git:git:1.6.0:rc1:*:*:*:*:*:* | 1.6.0 rc1 | Vulnerable | Git |
| cpe:2.3:a:git:git:1.6.0:rc2:*:*:*:*:*:* | 1.6.0 rc2 | Vulnerable | Git |
| cpe:2.3:a:git:git:1.6.0:rc3:*:*:*:*:*:* | 1.6.0 rc3 | Vulnerable | Git |
| cpe:2.3:a:git:git:1.6.0.1:*:*:*:*:*:*:* | 1.6.0.1 | Vulnerable | Git |
| cpe:2.3:a:git:git:1.6.0.2:*:*:*:*:*:*:* | 1.6.0.2 | Vulnerable | Git |
| cpe:2.3:a:git:git:1.6.0.3:*:*:*:*:*:*:* | 1.6.0.3 | Vulnerable | Git |
| cpe:2.3:a:git:git:1.6.0.4:*:*:*:*:*:*:* | 1.6.0.4 | Vulnerable | Git |
| cpe:2.3:a:git:git:1.6.0.5:*:*:*:*:*:*:* | 1.6.0.5 | Vulnerable | Git |
- cpe:2.3:a:git:git:1.5.0:*:*:*:*:*:*:* Versions 1.5.0 Vulnerable ·Git
- cpe:2.3:a:git:git:1.5.0:rc2:*:*:*:*:*:* Versions 1.5.0 rc2 Vulnerable ·Git
- cpe:2.3:a:git:git:1.5.0:rc3:*:*:*:*:*:* Versions 1.5.0 rc3 Vulnerable ·Git
- cpe:2.3:a:git:git:1.5.0:rc4:*:*:*:*:*:* Versions 1.5.0 rc4 Vulnerable ·Git
- cpe:2.3:a:git:git:1.5.0.1:*:*:*:*:*:*:* Versions 1.5.0.1 Vulnerable ·Git
- cpe:2.3:a:git:git:1.5.0.2:*:*:*:*:*:*:* Versions 1.5.0.2 Vulnerable ·Git
- cpe:2.3:a:git:git:1.5.0.3:*:*:*:*:*:*:* Versions 1.5.0.3 Vulnerable ·Git
- cpe:2.3:a:git:git:1.5.0.4:*:*:*:*:*:*:* Versions 1.5.0.4 Vulnerable ·Git
- cpe:2.3:a:git:git:1.5.0.5:*:*:*:*:*:*:* Versions 1.5.0.5 Vulnerable ·Git
- cpe:2.3:a:git:git:1.5.0.6:*:*:*:*:*:*:* Versions 1.5.0.6 Vulnerable ·Git
- cpe:2.3:a:git:git:1.5.0.7:*:*:*:*:*:*:* Versions 1.5.0.7 Vulnerable ·Git
- cpe:2.3:a:git:git:1.5.1:*:*:*:*:*:*:* Versions 1.5.1 Vulnerable ·Git
- cpe:2.3:a:git:git:1.5.1.1:*:*:*:*:*:*:* Versions 1.5.1.1 Vulnerable ·Git
- cpe:2.3:a:git:git:1.5.1.2:*:*:*:*:*:*:* Versions 1.5.1.2 Vulnerable ·Git
- cpe:2.3:a:git:git:1.5.1.3:*:*:*:*:*:*:* Versions 1.5.1.3 Vulnerable ·Git
- cpe:2.3:a:git:git:1.5.1.4:*:*:*:*:*:*:* Versions 1.5.1.4 Vulnerable ·Git
- cpe:2.3:a:git:git:1.5.1.5:*:*:*:*:*:*:* Versions 1.5.1.5 Vulnerable ·Git
- cpe:2.3:a:git:git:1.5.1.6:*:*:*:*:*:*:* Versions 1.5.1.6 Vulnerable ·Git
- cpe:2.3:a:git:git:1.5.2:*:*:*:*:*:*:* Versions 1.5.2 Vulnerable ·Git
- cpe:2.3:a:git:git:1.5.2.1:*:*:*:*:*:*:* Versions 1.5.2.1 Vulnerable ·Git
- cpe:2.3:a:git:git:1.5.2.2:*:*:*:*:*:*:* Versions 1.5.2.2 Vulnerable ·Git
- cpe:2.3:a:git:git:1.5.2.3:*:*:*:*:*:*:* Versions 1.5.2.3 Vulnerable ·Git
- cpe:2.3:a:git:git:1.5.2.4:*:*:*:*:*:*:* Versions 1.5.2.4 Vulnerable ·Git
- cpe:2.3:a:git:git:1.5.2.5:*:*:*:*:*:*:* Versions 1.5.2.5 Vulnerable ·Git
- cpe:2.3:a:git:git:1.5.3:*:*:*:*:*:*:* Versions 1.5.3 Vulnerable ·Git
- cpe:2.3:a:git:git:1.5.3:rc4:*:*:*:*:*:* Versions 1.5.3 rc4 Vulnerable ·Git
- cpe:2.3:a:git:git:1.5.3:rc5:*:*:*:*:*:* Versions 1.5.3 rc5 Vulnerable ·Git
- cpe:2.3:a:git:git:1.5.3:rc7:*:*:*:*:*:* Versions 1.5.3 rc7 Vulnerable ·Git
- cpe:2.3:a:git:git:1.5.3.1:*:*:*:*:*:*:* Versions 1.5.3.1 Vulnerable ·Git
- cpe:2.3:a:git:git:1.5.3.2:*:*:*:*:*:*:* Versions 1.5.3.2 Vulnerable ·Git
- cpe:2.3:a:git:git:1.5.3.3:*:*:*:*:*:*:* Versions 1.5.3.3 Vulnerable ·Git
- cpe:2.3:a:git:git:1.5.3.4:*:*:*:*:*:*:* Versions 1.5.3.4 Vulnerable ·Git
- cpe:2.3:a:git:git:1.5.3.5:*:*:*:*:*:*:* Versions 1.5.3.5 Vulnerable ·Git
- cpe:2.3:a:git:git:1.5.3.6:*:*:*:*:*:*:* Versions 1.5.3.6 Vulnerable ·Git
- cpe:2.3:a:git:git:1.5.3.7:*:*:*:*:*:*:* Versions 1.5.3.7 Vulnerable ·Git
- cpe:2.3:a:git:git:1.5.3.8:*:*:*:*:*:*:* Versions 1.5.3.8 Vulnerable ·Git
- cpe:2.3:a:git:git:1.5.4:*:*:*:*:*:*:* Versions 1.5.4 Vulnerable ·Git
- cpe:2.3:a:git:git:1.5.4:rc0:*:*:*:*:*:* Versions 1.5.4 rc0 Vulnerable ·Git
- cpe:2.3:a:git:git:1.5.4:rc1:*:*:*:*:*:* Versions 1.5.4 rc1 Vulnerable ·Git
- cpe:2.3:a:git:git:1.5.4:rc1.1136.g2794:*:*:*:*:*:* Versions 1.5.4 rc1.1136.g2794 Vulnerable ·Git
- cpe:2.3:a:git:git:1.5.4:rc2:*:*:*:*:*:* Versions 1.5.4 rc2 Vulnerable ·Git
- cpe:2.3:a:git:git:1.5.4:rc3:*:*:*:*:*:* Versions 1.5.4 rc3 Vulnerable ·Git
- cpe:2.3:a:git:git:1.5.4:rc4:*:*:*:*:*:* Versions 1.5.4 rc4 Vulnerable ·Git
- cpe:2.3:a:git:git:1.5.4:rc5:*:*:*:*:*:* Versions 1.5.4 rc5 Vulnerable ·Git
- cpe:2.3:a:git:git:1.5.4.1:*:*:*:*:*:*:* Versions 1.5.4.1 Vulnerable ·Git
- cpe:2.3:a:git:git:1.5.4.2:*:*:*:*:*:*:* Versions 1.5.4.2 Vulnerable ·Git
- cpe:2.3:a:git:git:1.5.4.3:*:*:*:*:*:*:* Versions 1.5.4.3 Vulnerable ·Git
- cpe:2.3:a:git:git:1.5.4.4:*:*:*:*:*:*:* Versions 1.5.4.4 Vulnerable ·Git
- cpe:2.3:a:git:git:1.5.4.5:*:*:*:*:*:*:* Versions 1.5.4.5 Vulnerable ·Git
- cpe:2.3:a:git:git:1.5.4.6:*:*:*:*:*:*:* Versions 1.5.4.6 Vulnerable ·Git
- cpe:2.3:a:git:git:1.5.5:*:*:*:*:*:*:* Versions 1.5.5 Vulnerable ·Git
- cpe:2.3:a:git:git:1.5.5:rc1:*:*:*:*:*:* Versions 1.5.5 rc1 Vulnerable ·Git
- cpe:2.3:a:git:git:1.5.5:rc2:*:*:*:*:*:* Versions 1.5.5 rc2 Vulnerable ·Git
- cpe:2.3:a:git:git:1.5.5:rc3:*:*:*:*:*:* Versions 1.5.5 rc3 Vulnerable ·Git
- cpe:2.3:a:git:git:1.5.5.1:*:*:*:*:*:*:* Versions 1.5.5.1 Vulnerable ·Git
- cpe:2.3:a:git:git:1.5.5.2:*:*:*:*:*:*:* Versions 1.5.5.2 Vulnerable ·Git
- cpe:2.3:a:git:git:1.5.5.3:*:*:*:*:*:*:* Versions 1.5.5.3 Vulnerable ·Git
- cpe:2.3:a:git:git:1.5.5.3:r1:*:*:*:*:*:* Versions 1.5.5.3 r1 Vulnerable ·Git
- cpe:2.3:a:git:git:1.5.5.4:*:*:*:*:*:*:* Versions 1.5.5.4 Vulnerable ·Git
- cpe:2.3:a:git:git:1.5.5.5:*:*:*:*:*:*:* Versions 1.5.5.5 Vulnerable ·Git
- cpe:2.3:a:git:git:1.5.6:*:*:*:*:*:*:* Versions 1.5.6 Vulnerable ·Git
- cpe:2.3:a:git:git:1.5.6.1:*:*:*:*:*:*:* Versions 1.5.6.1 Vulnerable ·Git
- cpe:2.3:a:git:git:1.5.6.2:*:*:*:*:*:*:* Versions 1.5.6.2 Vulnerable ·Git
- cpe:2.3:a:git:git:1.5.6.3:*:*:*:*:*:*:* Versions 1.5.6.3 Vulnerable ·Git
- cpe:2.3:a:git:git:1.5.6.4:*:*:*:*:*:*:* Versions 1.5.6.4 Vulnerable ·Git
- cpe:2.3:a:git:git:1.5.6.5:*:*:*:*:*:*:* Versions 1.5.6.5 Vulnerable ·Git
- cpe:2.3:a:git:git:1.6.0:*:*:*:*:*:*:* Versions 1.6.0 Vulnerable ·Git
- cpe:2.3:a:git:git:1.6.0:rc1:*:*:*:*:*:* Versions 1.6.0 rc1 Vulnerable ·Git
- cpe:2.3:a:git:git:1.6.0:rc2:*:*:*:*:*:* Versions 1.6.0 rc2 Vulnerable ·Git
- cpe:2.3:a:git:git:1.6.0:rc3:*:*:*:*:*:* Versions 1.6.0 rc3 Vulnerable ·Git
- cpe:2.3:a:git:git:1.6.0.1:*:*:*:*:*:*:* Versions 1.6.0.1 Vulnerable ·Git
- cpe:2.3:a:git:git:1.6.0.2:*:*:*:*:*:*:* Versions 1.6.0.2 Vulnerable ·Git
- cpe:2.3:a:git:git:1.6.0.3:*:*:*:*:*:*:* Versions 1.6.0.3 Vulnerable ·Git
- cpe:2.3:a:git:git:1.6.0.4:*:*:*:*:*:*:* Versions 1.6.0.4 Vulnerable ·Git
- cpe:2.3:a:git:git:1.6.0.5:*:*:*:*:*:*:* Versions 1.6.0.5 Vulnerable ·Git
Remediation
No fixed version listed by the sources yet.
Vendor assessments
Timeline
- 2026-10-02 Threatist record created from CVE-2008-5916
- 2026-10-03 Alias added: GHSA-52fx-g623-mw3m
References
More Git vulnerabilities
- TI-2024-21101 Git's recursive clones on case-insensitive filesystems that support symlinks are susceptible to Remote Code Execution CVSS 3.1CRITICAL 9.1
- TI-2020-04316 malicious URLs may cause Git to present stored credentials to the wrong server CVSS 3.1CRITICAL 9.3
- TI-2022-09232 Command injection in git CVSS 3.1CRITICAL 9.8
- TI-2008-05233 The web interface in git (gitweb) 1.5.x before 1.5.6 allows remote attackers to execute… CVSS 2.0HIGH 7.5
- TI-2008-05232 The web interface in git (gitweb) 1.5.x before 1.5.5 allows remote attackers to execute… CVSS 2.0HIGH 7.5
- TI-2008-03393 Stack-based buffer overflow in the (1) diff_addremove and (2) diff_change functions in… CVSS 2.0HIGH 7.5
Sources
- CVE-2008-5916 · CVE Program
- CVE-2008-5916 · NVD
- FIRST EPSS
- GHSA-52fx-g623-mw3m · GitHub Advisory Database · CC BY 4.0
- CVE-2008-5916 · Red Hat security data · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences