REDHAT-BUG-2151583: Input Validation
All versions of package gitpython are vulnerable to Remote Code Execution (RCE) due to improper user input validation, which makes it possible to inject a maliciously crafted remote URL into the clone command. Exploiting this vulnerability is possible because the library makes external calls to git without sufficient sanitization of input arguments.
Affected Software
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-2151583?
The severity of REDHAT-BUG-2151583 is critical due to the potential for Remote Code Execution.
How do I fix REDHAT-BUG-2151583?
To fix REDHAT-BUG-2151583, update to the latest patched version of GitPython.
What causes REDHAT-BUG-2151583?
REDHAT-BUG-2151583 is caused by improper user input validation allowing malicious URLs in the clone command.
Which versions of GitPython are affected by REDHAT-BUG-2151583?
All versions of GitPython are affected by REDHAT-BUG-2151583.
What are the risks of exploiting REDHAT-BUG-2151583?
Exploiting REDHAT-BUG-2151583 can lead to unauthorized Remote Code Execution on affected systems.