Bug 2151583 (CVE-2022-24439) - CVE-2022-24439 GitPython: improper user input validation leads into a RCE
Summary: CVE-2022-24439 GitPython: improper user input validation leads into a RCE
Keywords:
Status: NEW
Alias: CVE-2022-24439
Product: Security Response
Classification: Other
Component: vulnerability
Version: unspecified
Hardware: All
OS: Linux
medium
medium
Target Milestone: ---
Assignee: Nobody
QA Contact:
URL:
Whiteboard:
Depends On: 2155964 2163464 2155815 2155816 2155817 2155818 2155962 2155963
Blocks: 2155779
TreeView+ depends on / blocked
 
Reported: 2022-12-07 14:47 UTC by Borja Tarraso
Modified: 2023-07-07 08:34 UTC (History)
26 users (show)

Fixed In Version:
Doc Type: If docs needed, set a value
Doc Text:
A remote code execution vulnerability exists in Git-python. By injecting a malicious URL into the clone command, an attacker can exploit this vulnerability as the library makes external calls to git without any input sanitization. This issue leads to complete system compromise.
Clone Of:
Environment:
Last Closed:
Embargoed:

Attachments (Terms of Use)


Links
System ID Private Priority Status Summary Last Updated
OpenStack gerrit 869611 0 None MERGED Bump GitPython to 3.1.30 2023-01-10 13:17:31 UTC

Description Borja Tarraso 2022-12-07 14:47:27 UTC 
All versions of package gitpython are vulnerable to Remote Code Execution (RCE) due to improper user input validation, which makes it possible to inject a maliciously crafted remote URL into the clone command. Exploiting this vulnerability is possible because the library makes external calls to git without sufficient sanitization of input arguments.
Comment 2 Avinash Hanwate 2022-12-23 03:21:52 UTC 
Created GitPython tracking bugs for this issue:

Affects: epel-all [bug 2155962]
Affects: fedora-all [bug 2155963]
Affects: openstack-rdo [bug 2155964]
Comment 4 Lon Hohberger 2023-01-03 17:19:02 UTC 
https://github.com/gitpython-developers/GitPython/pull/1518/commits
Comment 5 Lon Hohberger 2023-01-06 22:11:31 UTC 
https://github.com/gitpython-developers/GitPython/pull/1521
Note You need to log in before you can comment on or make changes to this bug.