GitAhead through 2.7.1 contains an OS command injection vulnerability in src/git/Filter.cpp that allows malicious repositories to execute commands by substituting crafted filenames into clean/smudge filter commands. Attackers can ship files named with $(command) selected via .gitattributes so checkout or staging runs the command through bash -c as the victim.
Attack Parameters
Attack Vector
Network
Can be exploited remotely
Attack Complexity
High
Difficult to exploit
Attack Requirements
Present
Additional conditions required
Privileges Required
None
No privileges needed
User Interaction
Passive
Minimal interaction
Impact Assessment
Confidentiality
High
Complete data leak
Integrity
High
Complete data modification
Availability
High
Complete denial of service
CVSS Vector v4.0
Weakness Type (CWE)
Vulnerable Products
gitahead:gitahead
References 4
https://github.com/gitahead/gitahead/issues/661
GitHub Issue #661
https://github.com/gitahead/gitahead
NVD
https://github.com/gitahead/gitahead/blob/v2.7.1/src/git/Filter.cpp#L43-L70
NVD
https://www.vulncheck.com/advisories/gitahead-through-2.7.1-os-command-injectio…
VulnCheck Advisory: GitAhead through 2.7.1 OS Command Injection via Git Filter Filenames