https://pfspipe.ipmu.jp/jira This file is an XML representation of an issue en-us 8.3.4 803005 13-09-2019 https://pfspipe.ipmu.jp/jira/browse/REDMINE1D-313 1D Redmine <p><em><font color="#505f79"> Created on 2023-09-15 08:42:35 by Ali Allaoui. % Done: 100</font></em></p> <p>GitPython before 3.1.32 does not block insecure non-multi options in clone and clone_from, making it vulnerable to Remote Code Execution (RCE) due to improper user input validation, which makes it possible to inject a maliciously crafted remote URL into the clone command. Exploiting this vulnerability is possible because the library makes external calls to git without sufficient sanitization of input arguments. NOTE: this issue exists because of an incomplete fix for CVE-2022-24439.</p> REDMINE1D-313

[RM-8297] Update GitPython version

Task Normal Done Done Redmine-Jira Migtation Redmine-Jira Migtation Mon, 18 Sep 2023 18:16:27 +0000 Thu, 21 Sep 2023 18:19:38 +0000 Thu, 21 Sep 2023 18:19:38 +0000 0 1 <p>Comment by Ali Allaoui on 2023-09-15 14:24:59:<br/> <a href="https://gitlab.lam.fr/CPF/cpf-redshift/-/merge_requests/541" class="external-link" rel="nofollow">https://gitlab.lam.fr/CPF/cpf-redshift/-/merge_requests/541</a></p> <p>Comment by Pierre-yves Chabaud on 2023-09-15 16:20:51:<br/> Merged into @develop@ (@9826650f@)</p> Development Rank 0|zzszlj: