Skip to content
OpenAdvisories

Product · j6t

gitk

2 known vulnerabilities.

1 result · Clear filters · Feed

  • High 8.6

    Gitk allows arbitrary command execution

    Gitk is a Tcl/Tk based Git history browser. Starting with 2.41.0, a Git repository can be crafted in such a way that with some social engineering a user who has cloned the repository can be tricked into running any script (e.g., Bourne shell, Perl, Python, ..…