Approved changes feed: RSS · Atom

cpe:2.3:a:git_project:git:2.4.7:*:*:*:*:*:*:*

part: a version: 2.4.7 update: *

VendorGit Project (e646ab1e-b3f4-5585-84a8-85828d605ea0)
ProductGit (058b9c63-77a7-5632-8f62-1ddbbb28fa58)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:deb/debian/git purl2cpe 2026-06-01 10:18:17.584803
pkg:deb/ubuntu/git purl2cpe 2026-06-01 10:18:17.584805
pkg:github/git/git purl2cpe 2026-06-01 10:18:17.584806
pkg:gitlab/gitlab-org/git purl2cpe 2026-06-01 10:18:17.584808
pkg:rpm/centos/git purl2cpe 2026-06-01 10:18:17.584809
pkg:rpm/fedora/git purl2cpe 2026-06-01 10:18:17.584810
pkg:rpm/opensuse/git purl2cpe 2026-06-01 10:18:17.584812

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2015-7545 vulnerable 2026-06-08 05:07:01.297420 Details available
The (1) git-remote-ext and (2) unspecified other remote helper programs in Git before 2.3.10, 2.4.x before 2.4.10, 2.5.x before 2.5.4, and 2.6.x before 2.6.1 do not properly restrict the allowed protocols, which might allow remote attackers to execute arbitrary code via a URL in a (a) .gitmodules file or (b) unknown other sources in a submodule.
Published: 2016-04-13T15:00:00.000Z
Updated: 2024-08-06T07:51:28.413Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.