9.8

CVE-2015-7545

The (1) git-remote-ext and (2) unspecified other remote helper programs in Git before 2.3.10, 2.4.x before 2.4.10, 2.5.x before 2.5.4, and 2.6.x before 2.6.1 do not properly restrict the allowed protocols, which might allow remote attackers to execute arbitrary code via a URL in a (a) .gitmodules file or (b) unknown other sources in a submodule.

Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Git Project ≫ Git Version <= 2.3.9
Git Project ≫ Git Version2.4.0
Git Project ≫ Git Version2.4.1
Git Project ≫ Git Version2.4.2
Git Project ≫ Git Version2.4.3
Git Project ≫ Git Version2.4.4
Git Project ≫ Git Version2.4.5
Git Project ≫ Git Version2.4.6
Git Project ≫ Git Version2.4.7
Git Project ≫ Git Version2.4.8
Git Project ≫ Git Version2.4.9
Git Project ≫ Git Version2.5.0
Git Project ≫ Git Version2.5.1
Git Project ≫ Git Version2.5.2
Git Project ≫ Git Version2.5.3
Git Project ≫ Git Version2.6.0
Redhat ≫ Software Collections Version1.0
Canonical ≫ Ubuntu Linux Version12.04 SwEditionlts
Canonical ≫ Ubuntu Linux Version14.04 SwEditionlts
Canonical ≫ Ubuntu Linux Version15.04
Canonical ≫ Ubuntu Linux Version15.10
Opensuse ≫ Opensuse Version13.1
Opensuse ≫ Opensuse Version13.2
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 34.73% 0.969
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 9.8 3.9 5.9
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
nvd@nist.gov 7.5 10 6.4
AV:N/AC:L/Au:N/C:P/I:P/A:P
CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

CWE-284 Improper Access Control

The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.