Vulnerability Details CVE-2019-1348
An issue was found in Git before v2.24.1, v2.23.1, v2.22.2, v2.21.1, v2.20.2, v2.19.3, v2.18.2, v2.17.3, v2.16.6, v2.15.4, and v2.14.6. The --export-marks option of git fast-import is exposed also via the in-stream command feature export-marks=... and it allows overwriting arbitrary paths.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.0
EPSS Ranking 7.0%
CVSS Severity
CVSS v3 Score 3.3
CVSS v2 Score 3.6
Products affected by CVE-2019-1348
-
cpe:2.3:a:git-scm:git:2.14.0
-
cpe:2.3:a:git-scm:git:2.14.1
-
cpe:2.3:a:git-scm:git:2.14.2
-
cpe:2.3:a:git-scm:git:2.14.3
-
cpe:2.3:a:git-scm:git:2.14.4
-
cpe:2.3:a:git-scm:git:2.14.5
-
cpe:2.3:a:git-scm:git:2.15.0
-
cpe:2.3:a:git-scm:git:2.15.1
-
cpe:2.3:a:git-scm:git:2.15.2
-
cpe:2.3:a:git-scm:git:2.15.3
-
cpe:2.3:a:git-scm:git:2.16.0
-
cpe:2.3:a:git-scm:git:2.16.1
-
cpe:2.3:a:git-scm:git:2.16.2
-
cpe:2.3:a:git-scm:git:2.16.3
-
cpe:2.3:a:git-scm:git:2.16.4
-
cpe:2.3:a:git-scm:git:2.16.5
-
cpe:2.3:a:git-scm:git:2.17.0
-
cpe:2.3:a:git-scm:git:2.17.1
-
cpe:2.3:a:git-scm:git:2.17.2
-
cpe:2.3:a:git-scm:git:2.18.0
-
cpe:2.3:a:git-scm:git:2.18.1
-
cpe:2.3:a:git-scm:git:2.19.0
-
cpe:2.3:a:git-scm:git:2.19.1
-
cpe:2.3:a:git-scm:git:2.19.2
-
cpe:2.3:a:git-scm:git:2.20.0
-
cpe:2.3:a:git-scm:git:2.20.1
-
cpe:2.3:a:git-scm:git:2.21.0
-
cpe:2.3:a:git-scm:git:2.22.0
-
cpe:2.3:a:git-scm:git:2.22.1
-
cpe:2.3:a:git-scm:git:2.23.0
-
cpe:2.3:a:git-scm:git:2.24.0
-
cpe:2.3:o:opensuse:leap:15.1