GitProxy is an application that stands between developers and a Git remote endpoint (e.g., github.com). Versions 1.19.1 and below allow users to push to remote repositories while bypassing policies and explicit approvals. Since checks and plugins are skipped, code containing secrets or unwanted changes could be pushed into a repository. This is fixed in version 1.19.2.
oryginał ENCVSS Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:XFinos Gitproxy
APPFinos< 1.19.2
🔵
ZWERYFIKUJ U PRODUCENTA
Brak jednoznacznych danych o patchu. Sprawdź referencje od producenta.
CWE
Powiązane podatności
CVE-2025-54584HIGH7.0ten sam produkt
GitProxy is an application that stands between developers and a Git remote endpoint (e.g., github.com). In ver...
CVE-2025-54585HIGH8.2ten sam produkt
GitProxy is an application that stands between developers and a Git remote endpoint. In versions 1.19.1 and be...
CVE-2025-54586HIGH7.1ten sam produkt
GitProxy is an application that stands between developers and a Git remote endpoint. In versions 1.19.1 and be...