CVE-2022-42906

{"id": "CVE-2022-42906", "metrics": {"cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.8, "attackVector": "LOCAL", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 1.8}]}, "published": "2022-10-13T03:15:09.130", "references": [{"url": "https://github.com/jaspernbrouwer/powerline-gitstatus/issues/45", "tags": ["Exploit", "Issue Tracking", "Third Party Advisory"], "source": "cve@mitre.org"}, {"url": "https://github.com/jaspernbrouwer/powerline-gitstatus/releases/tag/v1.3.2", "tags": ["Release Notes"], "source": "cve@mitre.org"}, {"url": "https://lists.debian.org/debian-lts-announce/2023/01/msg00017.html", "tags": ["Mailing List", "Third Party Advisory"], "source": "cve@mitre.org"}, {"url": "https://github.com/jaspernbrouwer/powerline-gitstatus/issues/45", "tags": ["Exploit", "Issue Tracking", "Third Party Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://github.com/jaspernbrouwer/powerline-gitstatus/releases/tag/v1.3.2", "tags": ["Release Notes"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://lists.debian.org/debian-lts-announce/2023/01/msg00017.html", "tags": ["Mailing List", "Third Party Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-77"}]}], "descriptions": [{"lang": "en", "value": "powerline-gitstatus (aka Powerline Gitstatus) before 1.3.2 allows arbitrary code execution. git repositories can contain per-repository configuration that changes the behavior of git, including running arbitrary commands. When using powerline-gitstatus, changing to a directory automatically runs git commands in order to display information about the current repository in the prompt. If an attacker can convince a user to change their current directory to one controlled by the attacker, such as in a shared filesystem or extracted archive, powerline-gitstatus will run arbitrary commands under the attacker's control. NOTE: this is similar to CVE-2022-20001."}, {"lang": "es", "value": "powerline-gitstatus (tambi\u00e9n se conoce como Powerline Gitstatus) versiones anteriores a 1.3.2, permite la ejecuci\u00f3n de c\u00f3digo arbitrario. Los repositorios git pueden contener una configuraci\u00f3n por repositorio que cambia el comportamiento de git, incluyendo la ejecuci\u00f3n de comandos arbitrarios. Cuando es usado powerline-gitstatus, al cambiar a un directorio son ejecutados autom\u00e1ticamente comandos git para mostrar informaci\u00f3n sobre el repositorio actual en el prompt. Si un atacante puede convencer a un usuario para que cambie su directorio actual a uno controlado por el atacante, como en un sistema de archivos compartido o un archivo extra\u00eddo, powerline-gitstatus ejecutar\u00e1 comandos arbitrarios bajo el control del atacante. NOTA: esto es similar a CVE-2022-20001"}], "lastModified": "2024-11-21T07:25:34.783", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:powerline_gitstatus_project:powerline_gitstatus:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1423A320-441B-4508-8CE2-FD441DA30CEB", "versionEndExcluding": "1.3.2"}], "operator": "OR"}]}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}