CVE-2024-51990
Path traversal via crafted Git repositories in jj
概要
Path traversal via crafted Git repositories in jj
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
jj, or Jujutsu, is a Git-compatible VCS written in rust. In affected versions specially crafted Git repositories can cause jj to write files outside the clone. This issue has been addressed in version 0.23.0. Users are advised to upgrade. Users unable to upgrade should avoid cloning repos from unknown sources.
出典: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
参照URL
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov