Lucene search
Veracode Vulnerability DatabaseVERACODE:39275HistoryFeb 15, 2023 - 5:26 a.m.
Path Traversal
2023-02-1505:26:54
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
16
path traversal
git apply
working tree
overwritten
software
0.001 Low
EPSS
Percentile
43.4%
git is vulnerable to Path Traversal. By feeding a crafted input to git apply, a path outside the working tree can be overwritten as the user who is running git apply.
References
github.com/git/git/commit/c867e4fa180bec4750e9b54eb10f459030dbebfd
github.com/git/git/security/advisories/GHSA-r87m-v37r-cwfh
secdb.alpinelinux.org/edge/main.yaml
secdb.alpinelinux.org/v3.14/main.yaml
secdb.alpinelinux.org/v3.15/main.yaml
secdb.alpinelinux.org/v3.16/main.yaml
secdb.alpinelinux.org/v3.17/main.yaml
security.gentoo.org/glsa/202312-15
Related
debiancve
debiancve
CVE-2023-23946
2023-02-14 20:15:17
nessus
nessus
GitLab 0.0 < 15.6.8 / 15.7 < 15.7.7 / 15.8 < 15.8.2 (CVE-2023-23946)
2023-02-24 00:00:00
FreeBSD : git -- git apply overwriting paths outside the working tree (21f12de8-b1db-11ed-b0f4-002590f2a714)
2023-02-21 00:00:00
EulerOS 2.0 SP10 : git (EulerOS-SA-2023-1973)
2023-05-18 00:00:00
alpinelinux
alpinelinux
CVE-2023-23946
2023-02-14 20:15:17
mscve
mscve
GitHub: CVE-2023-23946 mingit Remote Code Execution Vulnerability
2023-03-14 07:00:00
cgr
cgr
CVE-2023-23946 vulnerabilities
2024-05-19 03:07:16
cvelist
cvelist
CVE-2023-23946 Git's `git apply` overwriting paths outside the working tree
2023-02-14 19:48:00
githubexploit
githubexploit
Exploit for Path Traversal in Git-Scm Git
2023-09-07 10:07:25
ubuntucve
ubuntucve
CVE-2023-23946
2023-02-14 00:00:00
cbl_mariner
cbl_mariner
CVE-2023-23946 affecting package git 2.33.6-1
2023-03-16 03:39:40
nvd
nvd
CVE-2023-23946
2023-02-14 20:15:17
cve
cve
CVE-2023-23946
2023-02-14 20:15:17
freebsd
freebsd
git -- "git apply" overwriting paths outside the working tree
2023-02-14 00:00:00
osv
osv
CVE-2023-23946
2023-02-14 20:15:17
git - security update
2023-02-23 00:00:00
git - security update
2023-02-23 00:00:00
wolfi
wolfi
CVE-2023-23946 vulnerabilities
2024-06-29 09:08:33
redhatcve
redhatcve
CVE-2023-23946
2023-02-17 15:59:20
prion
prion
Path traversal
2023-02-14 20:15:00
kaspersky
kaspersky
KLA20236 Multiple vulnerabilities in Git for Windows
2023-02-14 00:00:00
KLA48555 Multiple vulnerabilities in Microsoft Developer Tools
2023-03-14 00:00:00
fedora
fedora
[SECURITY] Fedora 37 Update: git-2.39.2-1.fc37
2023-02-16 02:06:58
[SECURITY] Fedora 36 Update: git-2.39.2-1.fc36
2023-02-22 11:10:29
openvas
openvas
openSUSE: Security Advisory for git (SUSE-SU-2023:0430-1)
2024-03-04 00:00:00
Fedora: Security Advisory for git (FEDORA-2023-5b372318ff)
2023-02-17 00:00:00
Debian: Security Advisory (DSA-5357-1)
2023-02-24 00:00:00
debian
debian
[SECURITY] [DSA 5357-1] git security update
2023-02-23 06:31:03
[SECURITY] [DLA 3338-1] git security update
2023-02-23 17:05:47
redos
redos
ROS-20230322-03
2023-03-22 00:00:00
cloudfoundry
cloudfoundry
USN-5871-1: Git vulnerabilities | Cloud Foundry
2023-02-24 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 10 package git version 2.33.7-alt1
2023-02-20 00:00:00
ubuntu
ubuntu
Git vulnerabilities
2023-02-14 00:00:00
amazon
amazon
Medium: git
2023-03-02 20:22:00
Medium: git
2023-03-02 22:36:00
slackware
slackware
[slackware-security] git
2023-02-15 19:51:52
github
github
Git security vulnerabilities announced
2023-02-14 18:45:56
mageia
mageia
Updated git packages fix security vulnerability
2023-02-27 23:27:16
cloudlinux
cloudlinux
git: Fix of 4 CVEs
2023-02-24 09:34:40
almalinux
almalinux
Important: git security update
2023-05-22 00:00:00
Important: git security update
2023-05-22 00:00:00
redhat
redhat
(RHSA-2023:3245) Important: git security update
2023-05-22 06:38:10
(RHSA-2023:3246) Important: git security update
2023-05-22 06:38:12
(RHSA-2024:0407) Moderate: git security update
2024-01-24 14:40:19
oraclelinux
oraclelinux
git security update
2023-05-24 00:00:00
git security update
2023-05-23 00:00:00
rocky
rocky
git security update
2023-05-25 02:36:20
rosalinux
rosalinux
Advisory ROSA-SA-2023-2292
2023-11-14 13:25:27
Advisory ROSA-SA-2024-2398
2024-04-11 08:08:00
gentoo
gentoo
Git: Multiple Vulnerabilities
2023-12-27 00:00:00
rapid7blog
rapid7blog
Patch Tuesday - March 2023
2023-03-14 23:46:44
ics
ics
Siemens SCALANCE XCM-/XRM-300
2024-02-15 12:00:00