git vulnerabilities (openEuler)
32 vulnerabilities.
-
gitopenEuler Git for Windows: Server-advertised bundle-uri can trigger outbound SMB callbacks via UNC and file:// paths on Windows 7.4 High -
gitopenEuler Git for Windows leaks NTLM hash when cloning from an attacker-controlled server 7.4 High -
gitopenEuler Git GUI malicious command injection on Windows 8.6 High -
gitopenEuler Git allows a buffer overflow in 'wincred' credential helper 6.3 Medium -
gitopenEuler Git alllows arbitrary file writes via bundle-uri parameter injection 8.6 High -
gitopenEuler Git allows arbitrary code execution through broken config quoting 8.1 High -
gitopenEuler Git GUI can create and overwrite files for which the user has write permission 8.5 High -
gitopenEuler Gitk allows arbitrary command execution 8.6 High -
gitopenEuler Gitk can create and truncate files in the user's home directory 3.6 Low -
gitopenEuler The sideband payload is passed unfiltered to the terminal in git 7.5 High -
gitopenEuler Newline confusion in credential helpers can lead to credential exfiltration in git 2.1 Low -
gitopenEuler Git does not sanitize URLs when asking for credentials interactively 2.1 Low -
gitopenEuler Git's protections for cloning untrusted repositories can be bypassed 7.4 High -
gitopenEuler Local Git clone may hardlink arbitrary user-readable files into the new repository's "objects/" directory 3.9 Low -
gitopenEuler Cloning local Git repository by untrusted user allows the untrusted user to modify objects in the cloned repository at will 3.9 Low -
gitopenEuler Git vulnerable to Remote Code Execution while cloning special-crafted local repositories 8.2 High -
gitopenEuler Git's recursive clones on case-insensitive filesystems that support symlinks are susceptible to Remote Code Execution 9.1 Critical -
gitopenEuler Arbitrary configuration injection via `git submodule deinit` 7.0 High -
gitopenEuler Git looks for localized messages in the wrong place 3.3 Low -
gitopenEuler "git apply --reject" partially-controlled arbitrary file write 7.5 High -
gitopenEuler Git's `git apply` overwriting paths outside the working tree 6.2 Medium -
gitopenEuler Git vulnerable to local clone-based data exfiltration with non-local transports 5.5 Medium -
gitopenEuler Git clone remote code execution vulnerability in git-for-windows 8.6 High -
gitopenEuler Integer overflow in `git archive`, `git log --format` leading to RCE in git 9.8 Critical -
gitopenEuler gitattributes parsing integer overflow in git 9.8 Critical -
gitopenEuler Git vulnerable to Remote Code Execution via Heap overflow in `git shell` 8.5 High -
gitopenEuler Git subject to exposure of sensitive information via local clone of symbolic links 5.5 Medium -
gitopenEuler Bypass of safe.directory protections in Git 7.8 High -
gitopenEuler Uncontrolled search for the Git directory in Git for Windows 6.0 Medium -
gitopenEuler git_connect_git in connect.c in Git before 2.30.1 allows a repository path to contain a newline... 7.5 High -
gitopenEuler Arbitrary code execution when checking out an attacker-controlled Git branch 8.8 High -
gitopenEuler malicious repositories can execute remote code while cloning 8.0 High