Lucene search
Security-metrics-botATLASSIAN:BAM-21284HistoryMar 26, 2021 - 5:02 p.m.
Git LFS on Windows vulnerable to remote code execution (CVE-2020-27955)
2021-03-2617:02:11
security-metrics-bot
jira.atlassian.com
28
git lfs
windows
remote code execution
vulnerability
bamboo
software
EPSS
0.954
Percentile
99.4%
A remote code exeecution vulnerability was recently discovered in Git LFS:
https://legalhackers.com/advisories/Git-LFS-RCE-Exploit-CVE-2020-27955.html
Vulnerable git clients that clone a malicious repository are vulnerable to remote code execution.
Please determine if Bamboo is vulnerable. If it is definitively determined not to be affected, please close this as a false positive. If it is vulnerable, please work on remediating the issue.
Related
githubexploit
githubexploit
ubuntucve
ubuntucve
CVE-2020-27955
2020-11-05 00:00:00
CVE-2021-21237
2021-01-15 00:00:00
osv
osv
Git LFS can execute a Git binary from the current directory
2022-02-11 23:39:18
CVE-2020-27955
2020-11-05 15:15:36
BIT-git-lfs-2020-27955
2024-03-06 10:52:29
zdt
zdt
Git git-lfs Remote Code Execution Exploit
2021-09-17 00:00:00
git-lfs Remote Code Execution Exploit
2020-11-08 00:00:00
cve
cve
CVE-2020-27955
2020-11-05 15:15:36
CVE-2021-21237
2021-01-15 18:15:15
nvd
nvd
CVE-2020-27955
2020-11-05 15:15:36
CVE-2021-21237
2021-01-15 18:15:15
packetstorm
packetstorm
git-lfs Remote Code Execution
2020-11-06 00:00:00
Git git-lfs Remote Code Execution
2021-09-16 00:00:00
debiancve
debiancve
CVE-2020-27955
2020-11-05 15:15:36
CVE-2021-21237
2021-01-15 18:15:15
alpinelinux
alpinelinux
CVE-2020-27955
2020-11-05 15:15:36
prion
prion
Remote code execution
2020-11-05 15:15:00
Directory traversal
2021-01-15 18:15:00
checkpoint_advisories
checkpoint_advisories
Git LFS Remote Code Execution (CVE-2020-27955)
2020-11-28 00:00:00
veracode
veracode
Remote Code Execution (RCE)
2022-02-14 09:57:20
atlassian
atlassian
Git LFS on Windows vulnerable to remote code execution (CVE-2020-27955)
2021-03-26 17:02:11
RCE via git-lfs in Sourcetree for Windows - CVE-2020-27955
2021-01-07 17:07:10
RCE via git-lfs in Sourcetree for Windows - CVE-2021-21237
2021-02-26 17:00:21
cvelist
cvelist
CVE-2020-27955
2020-11-05 14:57:36
metasploit
metasploit
Git Remote Code Execution via git-lfs (CVE-2020-27955)
2021-09-03 21:15:38
github
github
Git LFS can execute a Git binary from the current directory
2022-02-11 23:39:18
Git LFS can execute a Git binary from the current directory on Windows
2022-02-15 00:30:37
nessus
nessus
Photon OS 4.0: Git PHSA-2023-4.0-0426
2024-07-24 00:00:00
rapid7blog
rapid7blog
Metasploit Wrap-Up
2021-09-17 19:59:18
photon
photon
Critical Photon OS Security Update - PHSA-2023-4.0-0426
2023-07-13 00:00:00