PT-2021-17998 · Git-Bug · Git-Bug

Ryotak · Published 2021-03-22 · Updated 2022-05-20 · CVE-2021-28955

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: git-bug versions prior to 0.7.2

Description: The issue is related to an Uncontrolled Search Path Element, which can lead to the execution of a malicious git.bat command from the current directory in certain PATH situations, most often seen on Windows. This can happen when a malicious user crafts a git.bat command, commits it, and pushes it to a repository. Later, when git-bug searches for the git binary, the malicious executable can take priority and be executed. This issue occurs on Windows and other operating systems with a badly configured PATH.

Recommendations: For versions prior to 0.7.2, update to version 0.7.2 as soon as possible to fix the issue. As a temporary workaround, consider restricting the use of the vulnerable component or avoiding the execution of git.bat from the current directory until the update is applied.

Fix

Uncontrolled Search Path Element

Weakness Enumeration

CWE-427

Related Identifiers

CVE-2021-28955

GHSA-M898-H4PM-PQFR

OPENSUSE-SU-2024:12417-1

Affected Products

Git-Bug

References · 10

• https://osv.dev/vulnerability/GHSA-m898-h4pm-pqfr · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-28955 · Security Note
• https://osv.dev/vulnerability/CVE-2021-28955 · Vendor Advisory
• https://github.com/MichaelMure/git-bug/security/advisories/GHSA-m898-h4pm-pqfr · Note
• https://github.com/git-bug/git-bug/security/advisories/GHSA-m898-h4pm-pqfr · Note
• https://github.com/git-bug/git-bug · Note
• https://github.com/MichaelMure/git-bug/pull/604 · Note
• https://vuln.ryotak.me/advisories/18 · Note
• https://t.me/cvenotify/12626 · Telegram Post
• https://t.me/cvenotify/11692 · Telegram Post