GitHub Advisoryadvisory · Go
GHSA-4j5x-f394-xx79 gitjacker arbitrary code execution
CRITICAL
Official page ↗
- Aliases
- CVE-2021-29417
- Ecosystem
- Go
- Packages
- github.com/liamg/gitjacker
- Severity
- Critical
- CVSS vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- Weaknesses
- CWE-22
- Reviewed
- 2023-07-13
Affected packages
• Go github.com/liamg/gitjacker: < 0.1.0 → fixed in 0.1.0
Description
gitjacker before 0.1.0 allows remote attackers to execute arbitrary code via a crafted .git directory because of directory traversal.
Related
Alias · CVE (1)
- CVE-2021-29417 gitjacker before 0.1.0 allows remote attackers to execute arbitrary code via a crafted .git directory because of directory traversal. vulnerability
Weakness · CWE (1)
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory weakness