Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
redhatRedHatRHSA-2024:0190
HistoryJan 16, 2024 - 2:14 p.m.

(RHSA-2024:0190) Moderate: Red Hat OpenStack Platform 17.1 (GitPython) security update

2024-01-1614:14:09
access.redhat.com
7
red hat openstack
git repositories
security fix
cve-2023-41040
unix

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L

AI Score

7.1

Confidence

Low

EPSS

0.001

Percentile

22.9%

JSON

GitPython is a python library used to interact with Git repositories.

Security Fix(es):

  • Blind local file inclusion (CVE-2023-41040)

For more details about the security issue(s), including the impact, a CVSS
score, acknowledgments, and other related information, refer to the CVE
page listed in the References section.

OSVersionArchitecturePackageVersionFilename
RedHat8noarchpython3-gitpython< 3.1.14-2.el8ostpython3-GitPython-3.1.14-2.el8ost.noarch.rpm

Related

cvelist 1
debiancve 1
alpinelinux 1
osv 4
nvd 1
gitlab 1
openvas 3
github 1
ubuntucve 1
nessus 10
cve 1
veracode 1
debian 1
redhat 4
redhatcve 1
redos 2
prion 1
ibm 2
cvelist
cvelist
CVE-2023-41040 Blind local file inclusion in GitPython
2023-08-30 21:07:42
debiancve
debiancve
CVE-2023-41040
2023-08-30 22:15:09
alpinelinux
alpinelinux
CVE-2023-41040
2023-08-30 22:15:09
osv
osv
Blind local file inclusion
2023-08-30 20:09:36
PYSEC-2023-165
2023-08-30 22:15:00
python-git - security update
2023-09-29 00:00:00
nvd
nvd
CVE-2023-41040
2023-08-30 22:15:09
gitlab
gitlab
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
2023-08-30 00:00:00
openvas
openvas
openSUSE: Security Advisory for python (openSUSE-SU-2023:0259-1)
2024-03-04 00:00:00
openSUSE: Security Advisory for python (openSUSE-SU-2023:0271-1)
2024-03-04 00:00:00
Debian: Security Advisory (DLA-3589-1)
2023-10-02 00:00:00
github
github
Blind local file inclusion
2023-08-30 20:09:36
ubuntucve
ubuntucve
CVE-2023-41040
2023-08-30 00:00:00
nessus
nessus
Fedora 40 : GitPython (2023-7b78427a7d)
2024-04-29 00:00:00
RHEL 8 : Red Hat OpenStack Platform 17.1 (GitPython) (RHSA-2024:0190)
2024-04-28 00:00:00
openSUSE 15 Security Update : python-GitPython (openSUSE-SU-2023:0259-1)
2023-09-26 00:00:00
cve
cve
CVE-2023-41040
2023-08-30 22:15:09
veracode
veracode
Path Traversal
2023-09-01 09:16:07
debian
debian
[SECURITY] [DLA 3589-1] python-git security update
2023-09-29 18:06:28
redhat
redhat
(RHSA-2024:0215) Moderate: Red Hat OpenStack Platform 17.1 (GitPython) security update
2024-01-16 14:13:10
(RHSA-2024:0322) Moderate: Red Hat Ansible Automation Platform 2.4 Product Security and Bug Fix Update
2024-01-22 14:15:04
(RHSA-2023:7851) Moderate: Satellite 6.14.1 Async Security Update
2023-12-14 16:20:36
redhatcve
redhatcve
CVE-2023-41040
2023-10-31 01:43:04
redos
redos
ROS-20230915-13
2023-09-15 00:00:00
ROS-20240412-04
2024-04-12 00:00:00
prion
prion
Directory traversal
2023-08-30 22:15:00
ibm
ibm
Security Bulletin: Multiple security vulnerabilities are addressed with IBM Process Mining Interim Fix for October 2023
2024-01-05 16:45:03
Security Bulletin: Multiple Vulnerabilities in IBM Cloud Pak for Multicloud Management
2024-02-28 21:45:52

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L

AI Score

7.1

Confidence

Low

EPSS

0.001

Percentile

22.9%

JSON
Related for RHSA-2024:0190
cvelist1debiancve1alpinelinux1osv4nvd1gitlab1openvas3github1ubuntucve1nessus10cve1veracode1debian1redhat4redhatcve1redos2prion1ibm2