Lucene search
GoogleOSV:CVE-2021-40330HistoryAug 31, 2021 - 4:15 a.m.
CVE-2021-40330
2021-08-3104:15:10
Google
osv.dev
14
0.004 Low
EPSS
Percentile
72.0%
git_connect_git in connect.c in Git before 2.30.1 allows a repository path to contain a newline character, which may result in unexpected cross-protocol requests, as demonstrated by the git://localhost:1234/%0d%0a%0d%0aGET%20/%20HTTP/1.1 substring.
| CPE | Name | Operator | Version |
|---|---|---|---|
| git | eq | 1.8.1.1 | |
| git | eq | 2.25.1-r0 | |
| git | eq | gitgui-0.6.0 | |
| git | eq | 1.6.1-rc1 | |
| git | eq | 1.4.0 | |
| git | eq | 1.7.10.1-r0 | |
| git | eq | 1.7.12.2-r0 | |
| git | eq | 1.6.2.3-r0 | |
| git | eq | 1.9.2-r0 | |
| git | eq | 1.6.6.3 |
Related
photon
photon
suse
suse
Security update for git (low)
2021-10-06 00:00:00
Security update for git (low)
2021-10-11 00:00:00
cloudfoundry
cloudfoundry
USN-5076-1: Git vulnerability | Cloud Foundry
2021-10-28 00:00:00
nessus
nessus
EulerOS 2.0 SP8 : git (EulerOS-SA-2021-2801)
2021-12-25 00:00:00
EulerOS Virtualization 3.0.6.0 : git (EulerOS-SA-2022-1043)
2022-02-12 00:00:00
SUSE SLED15 / SLES15 Security Update : git (SUSE-SU-2021:3300-1)
2021-10-07 00:00:00
openvas
openvas
SUSE: Security Advisory (SUSE-SU-2021:3300-1)
2021-10-07 00:00:00
Ubuntu: Security Advisory (USN-5076-1)
2021-09-14 00:00:00
Huawei EulerOS: Security Advisory for git (EulerOS-SA-2022-1204)
2022-02-26 00:00:00
veracode
veracode
Cross-Site Request Forgery (CSRF)
2021-09-03 13:11:49
ubuntucve
ubuntucve
CVE-2021-40330
2021-08-31 00:00:00
debiancve
debiancve
CVE-2021-40330
2021-08-31 04:15:10
nvd
nvd
CVE-2021-40330
2021-08-31 04:15:10
ubuntu
ubuntu
Git vulnerability
2021-09-13 00:00:00
alpinelinux
alpinelinux
CVE-2021-40330
2021-08-31 04:15:10
cvelist
cvelist
CVE-2021-40330
2021-08-31 00:00:00
ibm
ibm
cve
cve
CVE-2021-40330
2021-08-31 04:15:10
redhatcve
redhatcve
CVE-2021-40330
2021-08-31 18:05:30
cbl_mariner
cbl_mariner
CVE-2021-40330 affecting package git 2.23.4-2
2021-10-05 03:00:54
osv
osv
git vulnerability
2021-09-13 14:49:00
git - security update
2022-10-11 00:00:00
prion
prion
Design/Logic Flaw
2021-08-31 04:15:00
debian
debian
[SECURITY] [DLA 3145-1] git security update
2022-10-10 22:16:21
cloudlinux
cloudlinux
git: Fix of 4 CVEs
2023-02-24 09:34:40