Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Vendor: Git Large File Storage Project Clear all filters
TI-2022-08639 CVE-2022-24826 · GHSA-6rw3-3whw-jvjj

Git LFS can execute a binary from the current directory on Windows

Priority MEDIUM 53

On Windows, if Git LFS operates on a malicious repository with a `..exe` file as well as a file named `git.exe`, and `git.exe` is not found in `PATH`, the `..exe` program will be executed, permitting the attacker to exec…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02228 Published 2022-04-19 Fixed in 3.1.3 CWE-426
TI-2017-13068 CVE-2017-17831 · GHSA-w4xh-w33p-4v29

GitHub Git LFS before 2.1.1 allows remote attackers to execute arbitrary commands via an…

Priority MEDIUM 44

GitHub Git LFS before 2.1.1 allows remote attackers to execute arbitrary commands via an ssh URL with an initial dash character in the hostname, located on a "url =" line in a .lfsconfig file within a repository.

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.03677 Published 2017-12-21 Fixed in 2.1.1-0.20170519163204-f913f5f9c7c6 CWE-20