Skip to content
OpenAdvisories

Archive

14 April 2020

Vulnerabilities first published on this day (UTC), newest first.

1 result · Clear filters · Feed

  • Critical 9.3
    CVE-2020-5260 Public exploit EPSS 15%

    malicious URLs may cause Git to present stored credentials to the wrong server

    Affected versions of Git have a vulnerability whereby Git can be tricked into sending private credentials to a host controlled by an attacker. Git uses external "credential helper" programs to store and retrieve passwords or other credentials from secure stor…