Required CVE Record Information
Description
git-annex is vulnerable to a private data exposure and exfiltration attack. It could expose the content of files located outside the git-annex repository, or content from a private web server on localhost or the LAN.
CVSS 1 Total
| Score | Severity | Version | Vector String |
|---|---|---|---|
| 5.9 | MEDIUM | 3.0 | CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N |
Updated:
This container includes required additional information provided by the CVE Program for this vulnerability.
References 2 Total
- lists.debian.org: [debian-lts-announce] 20180905 [SECURITY] [DLA 1495-1] git-annex security update mailing-listx_transferred
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-10857 x_transferred