Lucene search
Veracode Vulnerability DatabaseVERACODE:5598HistoryDec 22, 2017 - 2:56 a.m.
Remote Command Execution (RCE)
2017-12-2202:56:22
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
8
EPSS
0.005
Percentile
76.3%
github.com/git-lfs/git-lfs is vulnerable to remote code execution (RCE) attacks. The application does not sanitize ssh:// URLs passed to it, allowing a malicious user to execute arbitrary commands.
References
Related
nvd
nvd
CVE-2017-17831
2017-12-21 06:29:00
debiancve
debiancve
CVE-2017-17831
2017-12-21 06:29:00
cvelist
cvelist
CVE-2017-17831
2017-12-21 06:00:00
github
github
GitHub Git LFS Arbitrary command execution vulnerability
2022-05-14 00:55:16
cve
cve
CVE-2017-17831
2017-12-21 06:29:00
osv
osv
GitHub Git LFS Arbitrary command execution vulnerability
2022-05-14 00:55:16
Arbitrary command execution in github.com/git-lfs/git-lfs
2021-04-14 20:04:52
CVE-2017-17831
2017-12-21 06:29:00
prion
prion
Arbitrary file deletion
2017-12-21 06:29:00
ubuntucve
ubuntucve
CVE-2017-17831
2017-12-21 00:00:00
nessus
nessus
Atlassian SourceTree 0.5.1.0 < 2.4.7.0 Multiple Vulnerabilities
2018-02-16 00:00:00
atlassian
atlassian