CVE-2022-24439 — Remote Code Execution (RCE)
All versions of package gitpython are vulnerable to Remote Code Execution (RCE) due to improper user input validation, which makes it possible to inject a maliciously crafted re…
Published: 2022-12-12 · CVSS: 8.1 · CVSS 3.1
All versions of package gitpython are vulnerable to Remote Code Execution (RCE) due to improper user input validation, which makes it possible to inject a maliciously crafted remote URL into the clone command. Exploiting this vulnerability is possible because the library makes external calls to git without sufficient sanitization of input arguments.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7