Approved changes feed: RSS · Atom

cpe:2.3:a:git_project:git:2.4.1:*:*:*:*:*:*:*

part: a version: 2.4.1 update: *

VendorGit Project (e646ab1e-b3f4-5585-84a8-85828d605ea0)
ProductGit (058b9c63-77a7-5632-8f62-1ddbbb28fa58)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:deb/debian/git purl2cpe 2026-06-01 10:18:17.574401
pkg:deb/ubuntu/git purl2cpe 2026-06-01 10:18:17.574402
pkg:github/git/git purl2cpe 2026-06-01 10:18:17.574404
pkg:gitlab/gitlab-org/git purl2cpe 2026-06-01 10:18:17.574405
pkg:rpm/centos/git purl2cpe 2026-06-01 10:18:17.574406
pkg:rpm/fedora/git purl2cpe 2026-06-01 10:18:17.574408
pkg:rpm/opensuse/git purl2cpe 2026-06-01 10:18:17.574409

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2015-7545 vulnerable 2026-06-08 05:07:01.293347 Details available
The (1) git-remote-ext and (2) unspecified other remote helper programs in Git before 2.3.10, 2.4.x before 2.4.10, 2.5.x before 2.5.4, and 2.6.x before 2.6.1 do not properly restrict the allowed protocols, which might allow remote attackers to execute arbitrary code via a URL in a (a) .gitmodules file or (b) unknown other sources in a submodule.
Published: 2016-04-13T15:00:00.000Z
Updated: 2024-08-06T07:51:28.413Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.