CVE-2022-24439: `<gitpython::clone> 'ext::sh -c touch% /tmp/pwned'` for remote code execution · Issue #1515 · gitpython-developers/GitPython · GitHub

gitpython-developers / GitPython Public

• Notifications You must be signed in to change notification settings
• Fork 992
• Star 5.2k

• Code
• Issues 7
• Pull requests 1
• Discussions
• Actions
• Security and quality 34
• Insights

Additional navigation options

CVE-2022-24439: <gitpython::clone> 'ext::sh -c touch% /tmp/pwned' for remote code execution #1515

Copy link

Copy link

Closed

#1521

Closed

CVE-2022-24439: <gitpython::clone> 'ext::sh -c touch% /tmp/pwned' for remote code execution#1515

#1521

Copy link

Labels

acknowledgedcriticalhelp wanted

Description

mmuehlenhoff

opened on Dec 6, 2022

Issue body actions

This appeared in the CVE feed today: https://security.snyk.io/vuln/SNYK-PYTHON-GITPYTHON-3113858

Not sure if this was reported to you before or not, reporting it here just in case.

Reactions are currently unavailable

Metadata

Metadata

Assignees

No one assigned

Labels

acknowledgedcriticalhelp wanted

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions