RCE in Squareup Git-Fastclone
CVE-2015-8968
git-fastclone before 1.0.1 permits arbitrary shell command execution from .gitmodules. If an attacker can instruct a user to run a recursive clone from a repository they control, they can get a client to run an arbitrary shell command. Alternately, if an attacker can MITM an unencrypted git clone, they could exploit this. The ext command will be run if the repository is recursively cloned or if submodules are updated. This attack works when cloning both local and remote repositories.
Vulnerability class: Command Injection (OS Command Injection)
Published · last modified .
CVSS v3 metric
CVSS v3 base score 8.8 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H.
EPSS exploit prediction
EPSS: 0.052 (92.2th percentile), scored .
Low probability of exploitation in the next 30 days, but still tracked. 92nd percentile — 92.2% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.052 · newest: 0.052 · change: 0.000
Affected products
- Squareup Git-Fastclone
- Git-Fastclone Ruby Gem All Versions Before 1.0.1 — versions git-fastclone ruby gem All versions before 1.0.1
Weakness classification (CWE)
Public proof-of-concept exploits
References
- hackerone.com/reports/104465 (Exploit, Third Party Advisory)
- www.securityfocus.com/bid/81433 (VDB Entry, Third Party Advisory, vdb-entry)
- github.com/square/git-fastclone/pull/2 (Patch, Vendor Advisory)
Frequently asked questions
- What is CVE-2015-8968?
- CVE-2015-8968 is a high-severity vulnerability in Squareup Git-Fastclone, classified under Command Injection. CVSS score: 8.8/10. Published 2016-11-03.
- How severe is CVE-2015-8968?
- High severity. CVSS v3 base score is 8.8 out of 10.
- Is CVE-2015-8968 known to be exploited?
- 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.