CVE-2022-24975

The --mirror documentation for Git through 2.35.1 does not mention the availability of deleted content, aka the "GitBleed" issue

published February 11, 2022

CVSS
—
EPSS
3%
Percentile
85.4
In the wild
Unconfirmed
What it is

The --mirror documentation for Git through 2.35.1 does not mention the availability of deleted content, aka the "GitBleed" issue. This could present a security risk if information-disclosure auditing processes rely on a clone operation without the --mirror option. Note: This has been disputed by multiple 3rd parties who believe this is an intended feature of the git binary and does not pose a security risk.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02624 · 85.4th percentile
Published
2022-02-11T00:00Z
EPSS history
Timeline
  • 11 FEB 00:00Z
    The --mirror documentation for Git through 2.35.1 does not mention the availability of deleted content, aka the "GitBleed" issue
    cvelistv5