git vulnerabilities (Alpaquita)
15 vulnerabilities.
-
gitAlpaquita Git GUI malicious command injection on Windows 8.6 High -
gitAlpaquita Git allows a buffer overflow in 'wincred' credential helper 6.3 Medium -
gitAlpaquita Git alllows arbitrary file writes via bundle-uri parameter injection 8.6 High -
gitAlpaquita Git allows arbitrary code execution through broken config quoting 8.1 High -
gitAlpaquita Git GUI can create and overwrite files for which the user has write permission 8.5 High -
gitAlpaquita Gitk allows arbitrary command execution 8.6 High -
gitAlpaquita Gitk can create and truncate files in the user's home directory 3.6 Low -
gitAlpaquita The sideband payload is passed unfiltered to the terminal in git 7.5 High -
gitAlpaquita Newline confusion in credential helpers can lead to credential exfiltration in git 2.1 Low -
gitAlpaquita Git does not sanitize URLs when asking for credentials interactively 2.1 Low -
gitAlpaquita Git's protections for cloning untrusted repositories can be bypassed 7.4 High -
gitAlpaquita Local Git clone may hardlink arbitrary user-readable files into the new repository's "objects/" directory 3.9 Low -
gitAlpaquita Cloning local Git repository by untrusted user allows the untrusted user to modify objects in the cloned repository at will 3.9 Low -
gitAlpaquita Git vulnerable to Remote Code Execution while cloning special-crafted local repositories 8.2 High -
gitAlpaquita Git's recursive clones on case-insensitive filesystems that support symlinks are susceptible to Remote Code Execution 9.1 Critical