CVE-2022-24975
The --mirror documentation for Git through 2.35.1 does not mention the availability of deleted content, aka the "GitBleed" issue. This could present a...
Description d'origine
La description telle que publiée par la source (souvent en anglais).
The --mirror documentation for Git through 2.35.1 does not mention the availability of deleted content, aka the "GitBleed" issue. This could present a security risk if information-disclosure auditing processes rely on a clone operation without the --mirror option. Note: This has been disputed by multiple 3rd parties who believe this is an intended feature of the git binary and does not pose a security risk.
État des correctifs par distribution
Paquets corrigés publiés par chaque distribution pour cette CVE
- Debian DEBIAN-CVE-2022-24975 git
Références
- advisory github.com
- advisory nvd.nist.gov
- web github.com
- web lore.kernel.org
- web wwws.nightwatchcybersecurity.com
- web aquasec.com