CVE-2015-8969 | BDVDB-2026-79116 Detail

git-fastclone ruby gem All versions before 1.0.5

Description#

git-fastclone before 1.0.5 passes user modifiable strings directly to a shell command. An attacker can execute malicious commands by modifying the strings that are passed as arguments to "cd " and "git clone " commands in the library.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.securityfocus.com/bid/81433
https://github.com/square/git-fastclone/pull/5
https://hackerone.com/reports/105190

Exploit#

No public exploit known

History#

Version 12016-11-03Record published in the CVE List.
Version 22024-08-06Most recent update recorded in the CVE List.