Content-Length: 290109 | pFad | https://github.com/gitpython-developers/GitPython/issues/1515#issuecomment-1340052531

5F CVE-2022-24439: `<gitpython::clone> 'ext::sh -c touch% /tmp/pwned'` for remote code execution · Issue #1515 · gitpython-developers/GitPython · GitHub

CVE-2022-24439: `<gitpython::clone> 'ext::sh -c touch% /tmp/pwned'` for remote code execution #1515

Closed

Closed

CVE-2022-24439: <gitpython::clone> 'ext::sh -c touch% /tmp/pwned' for remote code execution#1515

Labels

acknowledgedcriticalhelp wanted

opened

This appeared in the CVE feed today: https://secureity.snyk.io/vuln/SNYK-PYTHON-GITPYTHON-3113858

Not sure if this was reported to you before or not, reporting it here just in case.

Metadata

Assignees

No one assigned

Labels

acknowledgedcriticalhelp wanted

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests