TI-2012-05078 CVE-2012-6114 · GHSA-fwg3-g57x-c324
Link following in git-extras
Priority LOW 25
The git-changelog utility in git-extras 1.7.0 allows local users to overwrite arbitrary files via a symlink attack on (1) /tmp/changelog or (2) /tmp/.git-effort.