Skip to content
OpenAdvisories

Vendor

j6t

4 known vulnerabilities.

Products

3 results · Clear filters · Feed

  • High 8.5

    Git GUI can create and overwrite files for which the user has write permission

    Git GUI allows you to use the Git source control management tools via a GUI. When a user clones an untrusted repository and is tricked into editing a file located in a maliciously named directory in the repository, then Git GUI can create and overwrite files …

  • High 8.6

    Git GUI malicious command injection on Windows

    Git GUI allows you to use the Git source control management tools via a GUI. A malicious repository can ship versions of sh.exe or typical textconv filter programs such as astextplain. Due to the unfortunate design of Tcl on Windows, the search path when look…

  • High 8.6

    Gitk allows arbitrary command execution

    Gitk is a Tcl/Tk based Git history browser. Starting with 2.41.0, a Git repository can be crafted in such a way that with some social engineering a user who has cloned the repository can be tricked into running any script (e.g., Bourne shell, Perl, Python, ..…