Path Traversal

2023-05-1404:22:24

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

path traversal

git

windows

vulnerability

software

0.0005 Low

EPSS

Percentile

16.5%

JSON

git is vulnerable to Path Traversal. In the windows port of Git, no localized messages are shipped with the installer. As a result, Git is expected not to localize messages at all, and skips the gettext initialization which could be exploited.

CPENameOperatorVersion
git:3.15eq2.34.0-r0
git:3.15eq2.34.7-r0
git:3.15eq2.34.2-r0
git:3.15eq2.34.5-r0
git:3.15eq2.34.6-r0
git:3.15eq2.34.1-r0
git:3.15eq2.34.4-r0
git:3.15eq2.33.1-r0
git:edgeeq2.40.0-r0
git:edgeeq2.37.1-r1

Name	Operator	Version
git:3.15	eq	2.34.0-r0
git:3.15	eq	2.34.7-r0
git:3.15	eq	2.34.2-r0
git:3.15	eq	2.34.5-r0
git:3.15	eq	2.34.6-r0
git:3.15	eq	2.34.1-r0
git:3.15	eq	2.34.4-r0
git:3.15	eq	2.33.1-r0
git:edge	eq	2.40.0-r0
git:edge	eq	2.37.1-r1