Vulnerability · NVD

CVE-2019-1387

CVE-2019-1387, rated critical by the vendor: 1 tracked app concerned, all fixed or indeterminable on their current version.

Severity (CVSS): 8.8
Exploitation: 4.4 %
Tracked apps: 1
Still exposed: 0

Vendor bulletin scale : NVD CVSS pending Published on 2019-12-18

An issue was found in Git before v2.24.1, v2.23.1, v2.22.2, v2.21.1, v2.20.2, v2.19.3, v2.18.2, v2.17.3, v2.16.6, v2.15.4, and v2.14.6. Recursive clones are currently affected by a vulnerability that is caused by too-lax validation of submodule names, allowing very targeted attacks via remote code execution in recursive clones.

Attack vector : Network No privileges required

Show raw CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS 4.43% above median percentile 91.3%

Tracked apps referencing this CVE

For each app: the affected range, the fixing version, and where the tracked app stands today.

Git Windows winget:Git.Git

Affected - Fixed in - Latest tracked PreRelease undetermined

Vulnerable CPE configurations (11)

Vendor	Product	Platform	Versions	CPE 2.3 URI
git-scm	git All platforms (wildcard)	All platforms (wildcard)	≥2.14.0 <2.14.6	cpe:2.3:a:git-scm:git::::::::
git-scm	git All platforms (wildcard)	All platforms (wildcard)	≥2.15.0 <2.15.4	cpe:2.3:a:git-scm:git::::::::
git-scm	git All platforms (wildcard)	All platforms (wildcard)	≥2.16.0 <2.16.6	cpe:2.3:a:git-scm:git::::::::
git-scm	git All platforms (wildcard)	All platforms (wildcard)	≥2.17.0 <2.17.3	cpe:2.3:a:git-scm:git::::::::
git-scm	git All platforms (wildcard)	All platforms (wildcard)	≥2.18.0 <2.18.2	cpe:2.3:a:git-scm:git::::::::
git-scm	git All platforms (wildcard)	All platforms (wildcard)	≥2.19.0 <2.19.3	cpe:2.3:a:git-scm:git::::::::
git-scm	git All platforms (wildcard)	All platforms (wildcard)	≥2.20.0 <2.20.2	cpe:2.3:a:git-scm:git::::::::
git-scm	git All platforms (wildcard)	All platforms (wildcard)	≥2.22.0 <2.22.2	cpe:2.3:a:git-scm:git::::::::
git-scm	git All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:git-scm:git:2.21.0:::::::*
git-scm	git All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:git-scm:git:2.23.0:::::::*
git-scm	git All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:git-scm:git:2.24.0:::::::*

View on NVD ↗

Manage your fleet with Appaloosa

Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.

Discover Appaloosa MDM