CVE-2022-24439

Name of the Vulnerable Software and Affected Versions gitpython versions (affected versions not specified)

Description The issue is related to improper user input validation in the gitpython library, which allows for Remote Code Execution (RCE) due to insufficient sanitization of input arguments when making external calls to git. This enables an attacker to inject a maliciously crafted remote URL into the clone command. The vulnerability is exploited because of the library's failure to properly clean input arguments before passing them to git.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.