Approved changes feed: RSS · Atom

cpe:2.3:a:git_project:git:2.5.3:*:*:*:*:*:*:*

part: a version: 2.5.3 update: *

VendorGit Project (e646ab1e-b3f4-5585-84a8-85828d605ea0)
ProductGit (058b9c63-77a7-5632-8f62-1ddbbb28fa58)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/git purl2cpe 2026-06-01 10:18:17.594016
pkg:deb/ubuntu/git purl2cpe 2026-06-01 10:18:17.594017
pkg:github/git/git purl2cpe 2026-06-01 10:18:17.594018
pkg:gitlab/gitlab-org/git purl2cpe 2026-06-01 10:18:17.594020
pkg:rpm/centos/git purl2cpe 2026-06-01 10:18:17.594021
pkg:rpm/fedora/git purl2cpe 2026-06-01 10:18:17.594023
pkg:rpm/opensuse/git purl2cpe 2026-06-01 10:18:17.594024

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2015-7545 vulnerable 2026-06-08 05:07:01.300911 Details available
The (1) git-remote-ext and (2) unspecified other remote helper programs in Git before 2.3.10, 2.4.x before 2.4.10, 2.5.x before 2.5.4, and 2.6.x before 2.6.1 do not properly restrict the allowed protocols, which might allow remote attackers to execute arbitrary code via a URL in a (a) .gitmodules file or (b) unknown other sources in a submodule.
Published: 2016-04-13T15:00:00.000Z
Updated: 2024-08-06T07:51:28.413Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.