正文

git_large_file_storage_project git_large_file_storage 不可信的搜索路径

admin
admin V管理员 /0 评论 /23 阅读
0422
此篇文章发布距今已超过1155天，您需要注意文章的内容或图片是否可用！

CVE编号

CVE-2021-21237

利用情况

暂无

补丁情况

N/A

披露时间

2021-01-16
漏洞描述
Git LFS is a command line extension for managing large files with Git. On Windows, if Git LFS operates on a malicious repository with a git.bat or git.exe file in the current directory, that program would be executed, permitting the attacker to execute arbitrary code. This does not affect Unix systems. This is the result of an incomplete fix for CVE-2020-27955. This issue occurs because on Windows, Go includes (and prefers) the current directory when the name of a command run does not contain a directory separator. Other than avoiding untrusted repositories or using a different operating system, there is no workaround. This is fixed in v2.13.2.
解决建议
建议您更新当前系统或软件至最新版，完成漏洞的修复。
参考链接
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-27955
https://github.com/git-lfs/git-lfs/commit/fc664697ed2c2081ee9633010de0a7f9debea72a
https://github.com/git-lfs/git-lfs/releases/tag/v2.13.2
https://github.com/git-lfs/git-lfs/security/advisories/GHSA-cx3w-xqmc-84g5
受影响软件情况
# 类型 厂商 产品 版本 影响面
1
运行在以下环境
应用 git_large_file_storage_project git_large_file_storage * Up to
(excluding)
2.13.2
CVSS3评分 7.8
  • 攻击路径 本地
  • 攻击复杂度 低
  • 权限要求 低
  • 影响范围 未更改
  • 用户交互 无
  • 可用性 高
  • 保密性 高
  • 完整性 高
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CWE-ID 漏洞类型 CWE-426 不可信的搜索路径