Name: CVE-2023-40267: Undefined Security Weakness
Creator: Rapid7
Published: 2023-08-11T00:00:00.000Z
License: https://www.rapid7.com/legal/website-terms-of-use/
Keywords: CVE, CVE-2023-40267, CVSS 9.8, EPSS 0.00382

GitPython before 3.1.32 does not block insecure non-multi options in clone and clone_from. NOTE: this issue exists because of an incomplete fix for CVE-2022-24439.

CVSS Details

CVSS 3.1 Base Score: 9.8
CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)

Covered by Rapid7

Product	Vendor Advisory	Solution File	Added	Published
Centos_linux	—	Upgrade rubygem-powerbarUpgrade rubygem-hammer_cli_foreman_tasksUpgrade rubygem-hammer_cli_foreman_virt_who_configureUpgrade rubygem-rest-clientUpgrade rubygem-unf_ext-debuginfoUpgrade rubygem-hammer_cli_foreman_ansibleUpgrade rubygem-hashieUpgrade rubygem-hammer_cli_foreman_templatesUpgrade rubygem-http-cookieUpgrade rubygem-hammer_cli_foreman_adminUpgrade python39-pulp_manifestUpgrade rubygem-unf_extUpgrade foreman-cliUpgrade rubygem-ffiUpgrade rubygem-oauthUpgrade rubygem-unicode-display_widthUpgrade rubygem-foreman_maintainUpgrade rubygem-hammer_cli_foreman_azure_rmUpgrade rubygem-highlineUpgrade rubygem-netrcUpgrade rubygem-domain_nameUpgrade satellite-cliUpgrade rubygem-clampUpgrade rubygem-version_gemUpgrade rubygem-hammer_cli_foreman_bootdiskUpgrade rubygem-amazing_printUpgrade satellite-maintainUpgrade rubygem-apipie-bindingsUpgrade rubygem-oauth-ttyUpgrade rubygem-unf_ext-debugsourceUpgrade rubygem-hammer_cli_katelloUpgrade rubygem-hammer_cli_foreman_googleUpgrade rubygem-ffi-debugsourceUpgrade rubygem-unicode-debugsourceUpgrade rubygem-unfUpgrade rubygem-snaky_hashUpgrade rubygem-fast_gettextUpgrade rubygem-ffi-debuginfoUpgrade rubygem-hammer_cli_foreman_discoveryUpgrade rubygem-hammer_cli_foremanUpgrade rubygem-hammer_cli_foreman_remote_executionUpgrade satellite-cloneUpgrade rubygem-http-acceptUpgrade rubygem-gssapiUpgrade rubygem-unicode-debuginfoUpgrade rubygem-little-pluggerUpgrade rubygem-unicodeUpgrade rubygem-mime-typesUpgrade rubygem-loggingUpgrade rubygem-mime-types-dataUpgrade rubygem-localeUpgrade rubygem-jwtUpgrade rubygem-hammer_cli_foreman_webhooksUpgrade rubygem-hammer_cli_foreman_openscapUpgrade rubygem-hammer_cliUpgrade rubygem-multi_json	Nov 1, 2023	Aug 11, 2023
Debian	—	Upgrade python-git	Aug 14, 2023	Aug 11, 2023
Redhat_linux	—	Upgrade rubygem-hammer_cli_foreman_tasksUpgrade rubygem-highlineUpgrade rubygem-foreman_maintainUpgrade rubygem-little-pluggerUpgrade foreman-cliUpgrade rubygem-oauth-ttyUpgrade rubygem-hammer_cli_foreman_adminUpgrade rubygem-unf_ext-debugsourceUpgrade rubygem-domain_nameUpgrade rubygem-unicode-display_widthUpgrade rubygem-hammer_cli_foreman_googleUpgrade rubygem-unfUpgrade satellite-cloneUpgrade rubygem-unf_ext-debuginfoUpgrade rubygem-hammer_cliUpgrade rubygem-hashieUpgrade rubygem-oauthUpgrade rubygem-apipie-bindingsUpgrade rubygem-clampUpgrade rubygem-powerbarUpgrade rubygem-mime-types-dataUpgrade rubygem-rest-clientUpgrade rubygem-hammer_cli_foreman_ansibleUpgrade rubygem-unicode-debugsourceUpgrade rubygem-unf_extUpgrade rubygem-ffi-debugsourceUpgrade rubygem-hammer_cli_katelloUpgrade rubygem-loggingUpgrade rubygem-fast_gettextUpgrade rubygem-version_gemUpgrade rubygem-ffiUpgrade rubygem-ffi-debuginfoUpgrade rubygem-hammer_cli_foreman_virt_who_configureUpgrade rubygem-snaky_hashUpgrade rubygem-gssapiUpgrade satellite-cliUpgrade rubygem-hammer_cli_foreman_webhooksUpgrade rubygem-http-acceptUpgrade rubygem-hammer_cli_foreman_bootdiskUpgrade rubygem-localeUpgrade rubygem-mime-typesUpgrade rubygem-hammer_cli_foreman_openscapUpgrade rubygem-hammer_cli_foremanUpgrade rubygem-hammer_cli_foreman_discoveryUpgrade rubygem-amazing_printUpgrade rubygem-unicode-debuginfoUpgrade rubygem-netrcUpgrade rubygem-hammer_cli_foreman_remote_executionUpgrade rubygem-hammer_cli_foreman_azure_rmUpgrade satellite-maintainUpgrade rubygem-http-cookieUpgrade rubygem-hammer_cli_foreman_templatesUpgrade python39-pulp_manifestUpgrade rubygem-unicodeUpgrade rubygem-jwtUpgrade rubygem-multi_json	Nov 1, 2023	Aug 11, 2023
Rocky_linux	—	Upgrade libdb-debuginfoUpgrade libdb-debugsourceUpgrade libdb-sql-devel-debuginfoUpgrade libdb-cxxUpgrade libdb-utils-debuginfoUpgrade libdb-cxx-debuginfoUpgrade libdb-sql-debuginfo	Mar 5, 2024	Aug 11, 2023
Ubuntu	—	Upgrade python-git (Ubuntu Pro)Upgrade python3-gitUpgrade python3-git (Ubuntu Pro)	Sep 5, 2023	Aug 11, 2023

Prioritize with Active Threat Intelligence

With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.

Explore Intelligence Hub

MDR Buyer's Guide

Global Threat Landscape Report

Grow your business