VDB
BDU%3A2023-06208
BDU%3A2023-06208
PUBLISHED
CVSS 10 CRITICAL
Уязвимость классов DirCacheCheckout, ResolveMerger, PullCommand и PatchApplier системы контроля версий Git на языке Java Eclipse JGit, позволяющая нарушителю выполнить произвольный код
Risk Scores
CVSS 2.0
10
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Eclipse Foundation | Eclipse JGit |
Timeline
- Oct 3, 2023 CVE Published
- Mar 21, 2024 CVE Updated
References
- https://projects.eclipse.org/projects/technology.jgit/releases/6.6.1 url
- https://vuldb.com/ru/?id.239484 url
- https://git.eclipse.org/c/jgit/jgit.git/commit/?id=9072103f3b3cf64dd12ad2949836ab98f62dabf1 advisory
- https://repo.eclipse.org/content/groups/releases/org/eclipse/jgit/org.eclipse.jgit.repository/6.6.1.202309021850-r/ advisory
- https://mvnrepository.com/artifact/org.eclipse.jgit/org.eclipse.jgit/6.6.1.202309021850-r advisory
- https://mvnrepository.com/artifact/org.eclipse.jgit/org.eclipse.jgit/6.7.0.202309050840-r advisory
- https://mvnrepository.com/artifact/org.eclipse.jgit/org.eclipse.jgit advisory
- https://gitlab.eclipse.org/security/vulnerability-reports/-/issues/11 advisory