Home - News ( United States | United Kingdom | Italy | Germany ) - Football scores

Showing content from https://github.com/j6t/gitk/security/advisories/GHSA-g4v5-fjv9-mhhc below:

Arbitrary command execution with Gitk · Advisory · j6t/gitk · GitHub

• Pricing

2.41.0 to 2.50.0

2.43.7, 2.44.4, 2.45.4, 2.46.4, 2.47.3, 2.48.2, 2.49.1, 2.50.1

A Git repository can be crafted in such a way that with some social engineering a user who has cloned the repository can be tricked into running any script (e.g., Bourne shell, Perl, Python, ...) supplied by the attacker by invoking gitk filename, where filename has a particular structure. The script is run with the privileges of the user.

• 8e3070a

• Do not clone repositories from untrusted sources.
• Do not use Gitk.

• Tcl's exec function documentation.

You can’t perform that action at this time.

RetroSearch is an open source project built by @garambo | Open a GitHub Issue

Search and Browse the WWW like it's 1997 | Search results from DuckDuckGo

HTML: 3.2 | Encoding: UTF-8 | Version: 0.7.4