← back
CVE-2020-27955

CVE-2020-27955

40Vexday Risk Score

Patch soon. It has a working public exploit.

ssvc Attendepss 83%
from disclosure to weapon0 days
Published on NVDNov 5
metasploitNov 4
exploitation probability
83%top 1% of all CVEs
observed exploitation
nono source reports it
Git LFS 2.12.0 allows Remote Code Execution.
Affected products
n/a · n/a
References
http://packetstormsecurity.com/files/159923/git-lfs-Remote-Code-Execution.htmlhttp://packetstormsecurity.com/files/164180/Git-git-lfs-Remote-Code-Execution.htmlhttp://seclists.org/fulldisclosure/2020/Nov/1https://exploitbox.iohttps://github.com/git-lfs/git-lfs/releaseshttps://legalhackers.comhttps://legalhackers.com/advisories/Git-LFS-RCE-Exploit-CVE-2020-27955.html