According to the version of the git packages installed, the EulerOS installation on the remote host is affected by the following vulnerability :

  - Affected versions of Git have a vulnerability whereby     Git can be tricked into sending private credentials to     a host controlled by an attacker. This bug is similar     to CVE-2020-5260(GHSA-qm7j-c969-7j4q). The fix for that     bug still left the door open for an exploit where
    _some_ credential is leaked (but the attacker cannot     control which one). Git uses external 'credential     helper' programs to store and retrieve passwords or     other credentials from secure storage provided by the     operating system. Specially-crafted URLs that are     considered illegal as of the recently published Git     versions can cause Git to send a 'blank' pattern to     helpers, missing hostname and protocol fields. Many     helpers will interpret this as matching _any_ URL, and     will return some unspecified stored password, leaking     the password to an attacker's server. The vulnerability     can be triggered by feeding a malicious URL to `git     clone`. However, the affected URLs look rather     suspicious the likely vector would be through systems     which automatically clone URLs not visible to the user,     such as Git submodules, or package systems built around     Git. The root of the problem is in Git itself, which     should not be feeding blank input to helpers. However,     the ability to exploit the vulnerability in practice     depends on which helpers are in use. Credential helpers     which are known to trigger the vulnerability: - Git's     'store' helper - Git's 'cache' helper - the     'osxkeychain' helper that ships in Git's 'contrib'     directory Credential helpers which are known to be safe     even with vulnerable versions of Git: - Git Credential     Manager for Windows Any helper not in this list should     be assumed to trigger the     vulnerability.(CVE-2020-11008)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

git security advisory reports :

Git uses external 'credential helper' programs to store and retrieve passwords or other credentials from secure storage provided by the operating system. Specially crafted URLs that are considered illegal as of the recently published Git versions can cause Git to send a 'blank' pattern to helpers, missing hostname and protocol fields. Many helpers will interpret this as matching any URL, and will return some unspecified stored password, leaking the password to an attacker's server.

The version of Apple Xcode installed on the remote macOS or Mac OS X host is prior to 11.5. It is, therefore, affected by an information disclosure vulnerability whereby Git can be tricked into sending private credentials to a host controlled by an attacker. An attacker can exploit this vulnerability by persuading a victim to open a crafted malicious `git clone` URL.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:1975 advisory.

    Git is a distributed revision control system with a decentralized architecture. As opposed to centralized     version control systems with a client-server model, Git ensures that each working copy of a Git repository     is an exact copy with complete revision history. This not only allows the user to work on and contribute     to projects without the need to have permission to push the changes to their official repositories, but     also makes it possible for the user to work with no network connection.

    The following packages have been upgraded to a later upstream version: rh-git218-git (2.18.4).
    (BZ#1826010)

    Security Fix(es):

    * git: Crafted URL containing new lines, empty host or lacks a scheme can cause credential leak     (CVE-2020-11008)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2020:1980 advisory.

  - git: Crafted URL containing new lines, empty host or lacks a scheme can cause credential leak     (CVE-2020-11008)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

According to the version of the git packages installed, the EulerOS installation on the remote host is affected by the following vulnerability :

  - Git is a fast, scalable, distributed revision control     system with an unusually rich command set that provides     both high-level operations and full access to     internals. The git rpm installs common set of tools     which are usually using with small amount of     dependencies. To install all git packages, including     tools for integrating with other SCMs, install the     git-all meta-package.Security Fix(es):Affected versions     of Git have a vulnerability whereby Git can be tricked     into sending private credentials to a host controlled     by an attacker. This bug is similar to     CVE-2020-5260(GHSA-qm7j-c969-7j4q). The fix for that     bug still left the door open for an exploit where
    _some_ credential is leaked (but the attacker cannot     control which one). Git uses external 'credential     helper' programs to store and retrieve passwords or     other credentials from secure storage provided by the     operating system. Specially-crafted URLs that are     considered illegal as of the recently published Git     versions can cause Git to send a 'blank' pattern to     helpers, missing hostname and protocol fields. Many     helpers will interpret this as matching _any_ URL, and     will return some unspecified stored password, leaking     the password to an attacker's server. The vulnerability     can be triggered by feeding a malicious URL to `git     clone`. However, the affected URLs look rather     suspicious the likely vector would be through systems     which automatically clone URLs not visible to the user,     such as Git submodules, or package systems built around     Git. The root of the problem is in Git itself, which     should not be feeding blank input to helpers. However,     the ability to exploit the vulnerability in practice     depends on which helpers are in use. Credential helpers     which are known to trigger the vulnerability: - Git's     'store' helper - Git's 'cache' helper - the     'osxkeychain' helper that ships in Git's 'contrib'     directory Credential helpers which are known to be safe     even with vulnerable versions of Git: - Git Credential     Manager for Windows Any helper not in this list should     be assumed to trigger the     vulnerability.(CVE-2020-11008)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Security fix for CVE-2020-5260 and CVE-2020-11008

CVE-2020-5260 - From the upstream [release notes](https://www.kernel.org/pub/software/scm/git/docs/RelNotes/2.17.
4.txt) :

> With a crafted URL that contains a newline in it, the credential > helper machinery can be fooled to give credential information for > a wrong host. The attack has been made impossible by forbidding > a newline character in any value passed via the credential > protocol.

CVE-2020-11008 - From the upstream [release notes](https://www.kernel.org/pub/software/scm/git/docs/RelNotes/2.17.
5.txt): > With a crafted URL that contains a newline or empty host, or lacks > a scheme, the credential helper machinery can be fooled into > providing credential information that is not appropriate for the > protocol in use and host being contacted. > > Unlike the vulnerability CVE-2020-5260 fixed in v2.17.4, the > credentials are not for a host of the attacker's choosing; instead, > they are for some unspecified host (based on how the configured > credential helper handles an absent 'host' parameter). > > The attack has been made impossible by refusing to work with > under-specified credential patterns.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALINUX3-SA-2022:0109 advisory.

    Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities:

    CVE-2019-1351:
    A tampering vulnerability exists when Git for Visual Studio improperly handles virtual drive paths, aka     'Git for Visual Studio Tampering Vulnerability'.

    CVE-2019-1354:
    A remote code execution vulnerability exists when Git for Visual Studio improperly sanitizes input, aka     'Git for Visual Studio Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-1349,     CVE-2019-1350, CVE-2019-1352, CVE-2019-1387.

    CVE-2019-1387:
    An issue was found in Git before v2.24.1, v2.23.1, v2.22.2, v2.21.1, v2.20.2, v2.19.3, v2.18.2, v2.17.3,     v2.16.6, v2.15.4, and v2.14.6. Recursive clones are currently affected by a vulnerability that is caused     by too-lax validation of submodule names, allowing very targeted attacks via remote code execution in     recursive clones.

    CVE-2020-5260:
    Affected versions of Git have a vulnerability whereby Git can be tricked into sending private credentials     to a host controlled by an attacker. Git uses external credential helper programs to store and retrieve     passwords or other credentials from secure storage provided by the operating system. Specially-crafted     URLs that contain an encoded newline can inject unintended values into the credential helper protocol     stream, causing the credential helper to retrieve the password for one server (e.g., good.example.com) for     an HTTP request being made to another server (e.g., evil.example.com), resulting in credentials for the     former being sent to the latter. There are no restrictions on the relationship between the two, meaning     that an attacker can craft a URL that will present stored credentials for any host to a host of their     choosing. The vulnerability can be triggered by feeding a malicious URL to git clone. However, the     affected URLs look rather suspicious; the likely vector would be through systems which automatically clone     URLs not visible to the user, such as Git submodules, or package systems built around Git. The problem has     been patched in the versions published on April 14th, 2020, going back to v2.17.x. Anyone wishing to     backport the change further can do so by applying commit 9a6bbee (the full release includes extra checks     for git fsck, but that commit is sufficient to protect clients against the vulnerability). The patched     versions are: 2.17.4, 2.18.3, 2.19.4, 2.20.3, 2.21.2, 2.22.3, 2.23.2, 2.24.2, 2.25.3, 2.26.1.

    CVE-2020-11008:
    Affected versions of Git have a vulnerability whereby Git can be tricked into sending private credentials     to a host controlled by an attacker. This bug is similar to CVE-2020-5260(GHSA-qm7j-c969-7j4q). The fix     for that bug still left the door open for an exploit where _some_ credential is leaked (but the attacker     cannot control which one). Git uses external credential helper programs to store and retrieve passwords     or other credentials from secure storage provided by the operating system. Specially-crafted URLs that are     considered illegal as of the recently published Git versions can cause Git to send a blank pattern to     helpers, missing hostname and protocol fields. Many helpers will interpret this as matching _any_ URL, and     will return some unspecified stored password, leaking the password to an attacker's server. The     vulnerability can be triggered by feeding a malicious URL to `git clone`. However, the affected URLs look     rather suspicious; the likely vector would be through systems which automatically clone URLs not visible     to the user, such as Git submodules, or package systems built around Git. The root of the problem is in     Git itself, which should not be feeding blank input to helpers. However, the ability to exploit the     vulnerability in practice depends on which helpers are in use. Credential helpers which are known to     trigger the vulnerability: - Git's store helper - Git's cache helper - the osxkeychain helper that     ships in Git's contrib directory Credential helpers which are known to be safe even with vulnerable     versions of Git: - Git Credential Manager for Windows Any helper not in this list should be assumed to     trigger the vulnerability.

Tenable has extracted the preceding description block directly from the Alibaba Cloud Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Gitlab reports :

Path Traversal in NuGet Package Registry

Workhorse Bypass Leads to File Disclosure

OAuth Application Client Secrets Revealed

Code Owners Approval Rules Are Not Updated for Existing Merge Requests When Source Branch Changes

Code Owners Protection Not Enforced from Web UI

Repository Mirror Passwords Exposed To Maintainers

Admin Audit Log Page Denial of Service

Private Project ID Revealed Through Group API

Elasticsearch Credentials Logged to ELK

GitHub Personal Access Token Exposed on Integrations Page

Update Nokogiri dependency

Update OpenSSL Dependency

Update git

An update of the git package has been released.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
136856	EulerOS 2.0 SP8 : git (EulerOS-SA-2020-1578)	Nessus	Huawei Local Security Checks	2020/5/26	2024/3/8	high
137167	FreeBSD : malicious URLs can cause git to send a stored credential to wrong server (67765237-8470-11ea-a283-b42e99a1b9c3)	Nessus	FreeBSD Local Security Checks	2020/6/5	2024/3/7	high
139727	Apple Xcode < 11.5 Git Credentials Disclosure (macOS)	Nessus	MacOS X Local Security Checks	2020/8/20	2020/9/8	high
170352	RHEL 7 : rh-git218-git (RHSA-2020:1975)	Nessus	Red Hat Local Security Checks	2023/1/23	2024/11/7	high
145960	CentOS 8 : git (CESA-2020:1980)	Nessus	CentOS Local Security Checks	2021/2/1	2021/3/23	high
146765	EulerOS 2.0 SP2 : git (EulerOS-SA-2021-1298)	Nessus	Huawei Local Security Checks	2021/2/22	2024/1/19	high
136211	Fedora 30 : git (2020-4e093619bb)	Nessus	Fedora Local Security Checks	2020/5/1	2024/3/14	high
236541	Alibaba Cloud Linux 3 : 0109: git (ALINUX3-SA-2022:0109)	Nessus	Alibaba Cloud Linux Local Security Checks	2025/5/14	2025/5/14	high
136304	FreeBSD : Gitlab -- Multiple Vulnerabilities (e8483115-8b8e-11ea-bdcf-001b217b3468)	Nessus	FreeBSD Local Security Checks	2020/5/4	2022/12/5	high
252274	Photon OS 5.0: Git PHSA-2025-5.0-0590	Nessus	PhotonOS Local Security Checks	2025/8/19	2025/8/23	critical

检测

插件搜索

high

high

high

high

high

high

high

high

high

critical