CVE-2018-7032

webcheckout in myrepos through 1.20171231 does not sanitize URLs that are passed to git clone, allowing a malicious website operator or a MitM attacker to take…

published February 14, 2018

CVSS
—
EPSS
2%
Percentile
79.9
In the wild
Unconfirmed
What it is

webcheckout in myrepos through 1.20171231 does not sanitize URLs that are passed to git clone, allowing a malicious website operator or a MitM attacker to take advantage of it for arbitrary code execution, as demonstrated by an "ext::sh -c" attack or an option injection attack.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01938 · 79.9th percentile
Published
2018-02-14T15:00Z
EPSS history
Timeline
  • 14 FEB 15:00Z
    webcheckout in myrepos through 1.20171231 does not sanitize URLs that are passed to git clone, allowing a malicious website operator or a MitM attacker to take…
    cvelistv5