CVE-2021-40330

Server-Side Request Forgery (SSRF) vulnerability in git

git における SSRF (サーバサイドリクエストフォージェリ)

git_connect_git in connect.c in Git before 2.30.1 allows a repository path to contain a newline character, which may result in unexpected cross-protocol requests, as demonstrated in the git commit

Disclosure Date

2021/01/08

Credit

stypr (@stereotype32)

CWE

  • CWE-918

Product URLs

Reference

Back