git-fastclone before 1.0.1 permits arbitrary shell command execution from .gitmodules. If an attacker can instruct a user to run a recursive clone from a repository they control, they can get a client to run an arbitrary shell command. Alternately, if an attacker can MITM an unencrypted git clone, they could exploit this. The ext command will be run if the repository is recursively cloned or if submodules are updated. This attack works when cloning both local and remote repositories.
References
| Link | Resource |
|---|---|
| http://www.securityfocus.com/bid/81433 | Third Party Advisory VDB Entry |
| https://github.com/square/git-fastclone/pull/2 | Patch Vendor Advisory |
| https://hackerone.com/reports/104465 | Exploit Third Party Advisory |
| http://www.securityfocus.com/bid/81433 | Third Party Advisory VDB Entry |
| https://github.com/square/git-fastclone/pull/2 | Patch Vendor Advisory |
| https://hackerone.com/reports/104465 | Exploit Third Party Advisory |
Configurations
History
21 Nov 2024, 02:39
| Type | Values Removed | Values Added |
|---|---|---|
| References | () http://www.securityfocus.com/bid/81433 - Third Party Advisory, VDB Entry | |
| References | () https://github.com/square/git-fastclone/pull/2 - Patch, Vendor Advisory | |
| References | () https://hackerone.com/reports/104465 - Exploit, Third Party Advisory |
Information
Published : 2016-11-03 10:59
Updated : 2024-11-21 02:39
NVD link : CVE-2015-8968
Mitre link : CVE-2015-8968
CVE.ORG link : CVE-2015-8968
JSON object : View
Products Affected
squareup
- git-fastclone
CWE
CWE-77
Improper Neutralization of Special Elements used in a Command ('Command Injection')