CVE-2022-24765 - log back

CVE-2022-24765 edited at 16 May 2022 19:28:33
Severity
- Unknown
+ Medium
Remote
- Unknown
+ Local
Type
- Unknown
+ Arbitrary command execution
Description
+ A vulnerability was found in Git. This flaw occurs due to Git not checking the ownership of directories in a local multi-user system when running commands specified in the local repository configuration. This allows the owner of the repository to cause arbitrary commands to be executed by other users who access the repository.
References
+ https://lore.kernel.org/git/xmqqv8veb5i6.fsf@gitster.g/
Notes
CVE-2022-24765 created at 14 Apr 2022 20:07:53