CVEvulnerability

CVE-2025-61659

6.8 MEDIUM Published 2025-09-29 Modified 2026-10-09 Official page ↗
Status
Deferred
Published
2025-09-29
Last modified
2026-10-09
Assigner
[email protected]
CVSS 3.1 ([email protected])
6.8 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L
Weaknesses
CWE-377

Description

bash-git-prompt 2.6.1 through 2.7.1 insecurely uses the /tmp/git-index-private$$ file, which has a predictable name.

Related

Weakness · not in database (1)

References