Path Traversal in Martinvonz Jj
CVE-2024-51990
jj, or Jujutsu, is a Git-compatible VCS written in rust. In affected versions specially crafted Git repositories can cause `jj` to write files outside the clone. This issue has been addressed in version 0.23.0. Users are advised to upgrade. Users unable to upgrade should avoid cloning repos from unknown sources.
Vulnerability class: Path Traversal (Directory Traversal)
EPSS: 0.006 (46.6th percentile) — read the EPSS interpretation.
Affected products
- Martinvonz Jj — versions < 0.23.0
Weakness classification (CWE)
References
- security-advisories@github.com (x_refsource_CONFIRM)