Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

  1. Reconshell
  2. Vulnerabilities (CVE)
Filtered by vendor Gitpython Project Subscribe
Filtered by product Gitpython
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2022-24439 2 Fedoraproject, Gitpython Project 2 Fedora, Gitpython 2023-02-06 N/A 9.8 CRITICAL
All versions of package gitpython are vulnerable to Remote Code Execution (RCE) due to improper user input validation, which makes it possible to inject a maliciously crafted remote URL into the clone command. Exploiting this vulnerability is possible because the library makes external calls to git without sufficient sanitization of input arguments.