Thread Rating:
  • 0 Vote(s) - 0 Average
  • 1
  • 2
  • 3
  • 4
  • 5
Git Vulnerability
#1
Nasli rupu u git-u dok dovlacite repozitorijum:
https://blogs.msdn.microsoft.com/vsoservice/?p=14655

Quote:When fetching from remote repositories, Git URL parsing can be confused by command line options embedded inside the URL. This can be exploited to pass specific command-line options to the ssh executable, and those options may specify a command to execute using its “ProxyCommand” functionality.


[Image: pwned-small1.gif]
Reply


Forum Jump:


Users browsing this thread: 1 Guest(s)