Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2024-21533

Quick assessment

Affected
n/a ggit
Exploitation
Public or AI PoC available; prioritize validation
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

ggit是Gleb Bahmutov个人开发者的一个工具。 ggit存在安全漏洞，该漏洞源于不会清理用户输入或验证给定的URL方案，容易受到任意参数注入攻击。

CVSS 6.5 · Medium EPSS 0.60% · P47
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2024-21533

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
All versions of the package ggit are vulnerable to Arbitrary Argument Injection via the clone() API, which allows specifying the remote URL to clone and the file on disk to clone to. The library does not sanitize for user input or validate a given URL scheme, nor does it properly pass command-line flags to the git binary using the double-dash POSIX characters (--) to communicate the end of options.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L
Source: CVE Program / CVE List V5
Vulnerability Type
参数注入或修改
Source: CVE Program / CVE List V5
Vulnerability Title
ggit 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
ggit是Gleb Bahmutov个人开发者的一个工具。 ggit存在安全漏洞，该漏洞源于不会清理用户输入或验证给定的URL方案，容易受到任意参数注入攻击。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor Product Affected Versions CPE Subscribe
- ggit 0 ~ * -

II. Public POCs for CVE-2024-21533

# POC Description Source Link Shenlong Link
1 CVE-2024-21533 PoC ggit https://github.com/lirantal/CVE-2024-21533-PoC-ggit POC Details
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2024-21533

请登录查看更多情报信息。

Vendor Advisories for CVE-2024-21533 (1)

Other References for CVE-2024-21533 (1)

Same Patch Batch · n/a · 2024-10-08 · 12 CVEs total

CVE-2024-21532 7.3 HIGH ggit 安全漏洞
CVE-2024-27457 2.5 LOW Intel TDX Module firmware 代码问题漏洞
CVE-2024-45880 Motorola CX2L 安全漏洞
CVE-2024-45231 Django 安全漏洞
CVE-2024-45230 Django 安全漏洞
CVE-2024-45918 Kelixin Communication Command and Dispatch Platform 安全漏洞
CVE-2024-44349 Anteeo WMS 安全漏洞
CVE-2024-25885 xhtml2pdf 安全漏洞
CVE-2024-46410 PublicCMS 安全漏洞
CVE-2024-46539 Fire Boltt Artillery Smart Watch NJ-R6E 安全漏洞
CVE-2024-36814 Eugene AdGuard Home 安全漏洞

IV. Related Vulnerabilities

Same product: ggit
Same vendor: n/a
Same weakness: CWE-88

V. Comments for CVE-2024-21533

No comments yet

Leave a comment