GitPython before 3.1.32 does not block insecure non-multi options in clone and clone_from. NOTE: this issue exists because of an incomplete fix for CVE-2022-24439.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade rubygem-hammer_cli_foreman_adminUpgrade rubygem-hashieUpgrade rubygem-highlineUpgrade rubygem-hammer_cli_foreman_tasksUpgrade rubygem-hammer_cli_foreman_virt_who_configureUpgrade rubygem-rest-clientUpgrade rubygem-unf_ext-debuginfoUpgrade rubygem-powerbarUpgrade rubygem-clampUpgrade rubygem-hammer_cli_foreman_bootdiskUpgrade rubygem-version_gemUpgrade rubygem-oauthUpgrade rubygem-http-cookieUpgrade rubygem-netrcUpgrade rubygem-hammer_cli_foreman_azure_rmUpgrade rubygem-foreman_maintainUpgrade rubygem-hammer_cli_foreman_ansibleUpgrade rubygem-unicode-display_widthUpgrade foreman-cliUpgrade rubygem-domain_nameUpgrade python39-pulp_manifestUpgrade rubygem-ffiUpgrade rubygem-hammer_cli_foreman_templatesUpgrade rubygem-unf_extUpgrade satellite-cliUpgrade rubygem-little-pluggerUpgrade rubygem-hammer_cli_foreman_webhooksUpgrade rubygem-unicode-debuginfoUpgrade rubygem-http-acceptUpgrade rubygem-gssapiUpgrade satellite-cloneUpgrade rubygem-hammer_cli_foreman_remote_executionUpgrade rubygem-amazing_printUpgrade rubygem-hammer_cli_foremanUpgrade rubygem-hammer_cli_foreman_discoveryUpgrade rubygem-ffi-debuginfoUpgrade rubygem-unf_ext-debugsourceUpgrade rubygem-mime-types-dataUpgrade rubygem-localeUpgrade rubygem-oauth-ttyUpgrade rubygem-hammer_cli_katelloUpgrade rubygem-hammer_cli_foreman_googleUpgrade rubygem-ffi-debugsourceUpgrade rubygem-unicode-debugsourceUpgrade rubygem-unfUpgrade satellite-maintainUpgrade rubygem-multi_jsonUpgrade rubygem-jwtUpgrade rubygem-apipie-bindingsUpgrade rubygem-hammer_cli_foreman_openscapUpgrade rubygem-hammer_cliUpgrade rubygem-snaky_hashUpgrade rubygem-fast_gettextUpgrade rubygem-unicodeUpgrade rubygem-mime-typesUpgrade rubygem-logging | Nov 1, 2023 | Aug 11, 2023 |
| Debian | — | Upgrade python-git | Aug 14, 2023 | Aug 11, 2023 |
| Redhat_linux | — | Upgrade rubygem-apipie-bindingsUpgrade rubygem-hammer_cli_foreman_tasksUpgrade rubygem-highlineUpgrade rubygem-unfUpgrade rubygem-foreman_maintainUpgrade rubygem-little-pluggerUpgrade rubygem-unicode-display_widthUpgrade foreman-cliUpgrade rubygem-oauthUpgrade rubygem-mime-types-dataUpgrade rubygem-powerbarUpgrade rubygem-rest-clientUpgrade rubygem-hammer_cli_foreman_googleUpgrade rubygem-unf_ext-debugsourceUpgrade rubygem-domain_nameUpgrade rubygem-hammer_cli_foreman_adminUpgrade satellite-cloneUpgrade rubygem-oauth-ttyUpgrade rubygem-unf_ext-debuginfoUpgrade rubygem-clampUpgrade rubygem-hashieUpgrade rubygem-hammer_cliUpgrade rubygem-mime-typesUpgrade rubygem-fast_gettextUpgrade rubygem-http-cookieUpgrade rubygem-unicode-debuginfoUpgrade rubygem-amazing_printUpgrade rubygem-hammer_cli_foreman_virt_who_configureUpgrade python39-pulp_manifestUpgrade rubygem-hammer_cli_foreman_azure_rmUpgrade rubygem-hammer_cli_foreman_openscapUpgrade rubygem-hammer_cli_foreman_bootdiskUpgrade rubygem-localeUpgrade rubygem-http-acceptUpgrade rubygem-ffi-debugsourceUpgrade rubygem-hammer_cli_katelloUpgrade rubygem-hammer_cli_foreman_webhooksUpgrade rubygem-ffiUpgrade rubygem-ffi-debuginfoUpgrade satellite-maintainUpgrade rubygem-gssapiUpgrade rubygem-netrcUpgrade rubygem-hammer_cli_foreman_templatesUpgrade satellite-cliUpgrade rubygem-hammer_cli_foreman_ansibleUpgrade rubygem-snaky_hashUpgrade rubygem-loggingUpgrade rubygem-unf_extUpgrade rubygem-multi_jsonUpgrade rubygem-version_gemUpgrade rubygem-unicodeUpgrade rubygem-jwtUpgrade rubygem-hammer_cli_foremanUpgrade rubygem-hammer_cli_foreman_remote_executionUpgrade rubygem-hammer_cli_foreman_discoveryUpgrade rubygem-unicode-debugsource | Nov 1, 2023 | Aug 11, 2023 |
| Rocky_linux | — | Upgrade libdb-debugsourceUpgrade libdb-debuginfoUpgrade libdb-sql-devel-debuginfoUpgrade libdb-utils-debuginfoUpgrade libdb-cxx-debuginfoUpgrade libdb-cxxUpgrade libdb-sql-debuginfo | Mar 5, 2024 | Aug 11, 2023 |
| Ubuntu | — | Upgrade python3-gitUpgrade python-git (Ubuntu Pro)Upgrade python3-git (Ubuntu Pro) | Sep 5, 2023 | Aug 11, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub