7.5

CVE-2021-46101

Exploit

In Git for windows through 2.34.1 when using git pull to update the local warehouse, git.cmd can be run directly.

Data is provided by the National Vulnerability Database (NVD)
Gitforwindows ≫ Git SwPlatformwindows Version <= 2.34.1
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.87% 0.742
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 7.5 3.9 3.6
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
nvd@nist.gov 5 10 2.9
AV:N/AC:L/Au:N/C:N/I:P/A:N
https://github.com/0xADY/git_rce
Third Party Advisory
Exploit