Approved changes feed: RSS · Atom

cpe:2.3:a:git_project:git:2.4.3:*:*:*:*:*:*:*

part: a version: 2.4.3 update: *

VendorGit Project (e646ab1e-b3f4-5585-84a8-85828d605ea0)
ProductGit (058b9c63-77a7-5632-8f62-1ddbbb28fa58)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:deb/debian/git purl2cpe 2026-06-01 10:18:17.577598
pkg:deb/ubuntu/git purl2cpe 2026-06-01 10:18:17.577600
pkg:github/git/git purl2cpe 2026-06-01 10:18:17.577601
pkg:gitlab/gitlab-org/git purl2cpe 2026-06-01 10:18:17.577603
pkg:rpm/centos/git purl2cpe 2026-06-01 10:18:17.577604
pkg:rpm/fedora/git purl2cpe 2026-06-01 10:18:17.577605
pkg:rpm/opensuse/git purl2cpe 2026-06-01 10:18:17.577607

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2015-7545 vulnerable 2026-06-08 05:07:01.294739 Details available
The (1) git-remote-ext and (2) unspecified other remote helper programs in Git before 2.3.10, 2.4.x before 2.4.10, 2.5.x before 2.5.4, and 2.6.x before 2.6.1 do not properly restrict the allowed protocols, which might allow remote attackers to execute arbitrary code via a URL in a (a) .gitmodules file or (b) unknown other sources in a submodule.
Published: 2016-04-13T15:00:00.000Z
Updated: 2024-08-06T07:51:28.413Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.