Security Advisory

CVE-2022-24439

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2022-12-12 01:49:10

Last updated 2025-11-03 21:46:05

Assigner snyk

State PUBLISHED

Description

All versions of package gitpython are vulnerable to Remote Code Execution (RCE) due to improper user input validation, which makes it possible to inject a maliciously crafted remote URL into the clone command. Exploiting this vulnerability is possible because the library makes external calls to git without sufficient sanitization of input arguments.

← Browse all CVEs View on cve.org ↗