Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 1

Export CSV
CVE-2023-53158

gix-transport: gix Command Execution Vulnerability

The gix-transport crate before 0.36.1 for Rust allows command execution via the "gix clone 'ssh://-oProxyCommand=open$IFS" substring. NOTE: this was discovered before CVE-2024-32884, a similar vulnerability (involving a username field) that is more difficult to exploit.

CVSS 3.1 · 4.1 Medium EPSS < 1% KEV · Not listed
Vendors
Gitoxidelabs
Products
Gix-transport