CVE-2020-27955
Git LFS 2.12.0 allows Remote Code Execution.
| Software | From | Fixed in |
|---|---|---|
| git_large_file_storage_project / git_large_file_storage | 2.12.0 | 2.12.0.x |
github.com/git-lfs/git-lfs
|
- | 2.12.1 |
- http://packetstormsecurity.com/files/159923/git-lfs-Remote-Code-Execution.html
- http://packetstormsecurity.com/files/164180/Git-git-lfs-Remote-Code-Execution.html
- http://seclists.org/fulldisclosure/2020/Nov/1
- https://exploitbox.io
- https://github.com/git-lfs/git-lfs/releases
- https://github.com/git-lfs/git-lfs/security/advisories/GHSA-4g4p-42wc-9f3m
- https://legalhackers.com
- https://legalhackers.com/advisories/Git-LFS-RCE-Exploit-CVE-2020-27955.html
Deep Security Visibility Without the Complexity
SynScan provides clear, real-time security insights so you can monitor your attack surface, spot risks early, and act fast—without extra complexity.
- No setup fees
- 5-min deployment
- Cancel anytime