Vulnerabilities

TI-2021-06173 CVE-2021-23632 · GHSA-9gqr-xp86-f87h

Remote code execution (RCE) in git

MEDIUM 47

All versions of package git are vulnerable to Remote Code Execution (RCE) due to missing sanitization in the Git.git method, which allows execution of OS commands rather than just git commands.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0235 Published 2022-03-17 No fix listed CWE-78

TI-2015-06272 CVE-2015-7545 · GHSA-3rvg-chjx-7h2j

The (1) git-remote-ext and (2) unspecified other remote helper programs in Git before…

MEDIUM 60

The (1) git-remote-ext and (2) unspecified other remote helper programs in Git before 2.3.10, 2.4.x before 2.4.10, 2.5.x before 2.5.4, and 2.6.x before 2.6.1 do not properly restrict the allowed protocols, which might al…

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.18672 Published 2016-04-13 Fixed CWE-20

TI-2015-05914 CVE-2015-7082 · GHSA-v284-mh6m-834f

Multiple unspecified vulnerabilities in Git before 2.5.4, as used in Apple Xcode before…

MEDIUM 46

Multiple unspecified vulnerabilities in Git before 2.5.4, as used in Apple Xcode before 7.2, have unknown impact and attack vectors.

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.01679 Published 2015-12-11 No fix listed

Vulnerabilities

Filters

Remote code execution (RCE) in git

The (1) git-remote-ext and (2) unspecified other remote helper programs in Git before…

Multiple unspecified vulnerabilities in Git before 2.5.4, as used in Apple Xcode before…