Vulnerability Database

296,663

Total vulnerabilities in the database

CVE-2020-27955

Git LFS 2.12.0 allows Remote Code Execution.

Published: Nov 5, 2020
Updated: May 9, 2024
CVE: CVE-2020-27955
GHSA: GHSA-4g4p-42wc-9f3m
Severity: Critical
Exploit:

CVSS v3:

Severity: Critical
Score: 9.8
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CVSS v2:

Severity: High
Score: 10
AV:N/AC:L/Au:N/C:C/I:C/A:C

CWEs:

CWE-427

Affected Software
References

Software	From	Fixed in
git_large_file_storage_project / git_large_file_storage	2.12.0	2.12.0.x
github.com/git-lfs/git-lfs	-	2.12.1

Deep Security Visibility Without the Complexity

SynScan provides clear, real-time security insights so you can monitor your attack surface, spot risks early, and act fast—without extra complexity.

No setup fees
5-min deployment
Cancel anytime