← back
CVE-2020-27955

CVE-2020-27955

EPSS 82.7%
Vexday Risk Score
40Attention
SSVC decision (CISA)
Attend
PoC available → attend closely
Exploit maturity
Functional exploit
Automatable exploit available (Nuclei/Metasploit).
CVSS —EPSS 82.7%KEV nãoPoC —Nuclei —Metasploit simPatch —
Lifecycle
04 Nov 2020Metasploit module available
05 Nov 2020Published on NVD
Recommendation: Plan a near-term fix — a public PoC already exists.
Git LFS 2.12.0 allows Remote Code Execution.
Affected products
n/a · n/a
References
http://packetstormsecurity.com/files/159923/git-lfs-Remote-Code-Execution.htmlhttp://packetstormsecurity.com/files/164180/Git-git-lfs-Remote-Code-Execution.htmlhttp://seclists.org/fulldisclosure/2020/Nov/1https://exploitbox.iohttps://github.com/git-lfs/git-lfs/releaseshttps://legalhackers.comhttps://legalhackers.com/advisories/Git-LFS-RCE-Exploit-CVE-2020-27955.html