CVE-2018-11235

mediumPriorität · beachten · 58EPSS 0.481 · 99. PerzentilExploit · PoCDEEURUUS

grimoire priorityP1 · Urgent

Exploitable?

Public exploit

15 exploits · PoC

Likely / severe?

48.1% (99th) EPSS

CVSS 6.8 · medium

Is it mine?

28 products

Prüfe deine Angriffsfläche

Who says so?

5 sources

cnnvd · enisa_euvd · fstec_bdu · nvd

EPSS · bewertet 2026-10-27

In Git before 2.13.7, 2.14.x before 2.14.4, 2.15.x before 2.15.2, 2.16.x before 2.16.4, and 2.17.x before 2.17.1, remote code execution can occur. With a crafted .gitmodules file, a malicious project can execute an arbitrary script on a machine that runs "git clone --recurse-submodules" because submodule "names" are obtained from this file, and then appended to $GIT_DIR/modules, leading to directory traversal with "../" in a name. Finally, post-checkout hooks from a submodule are executed, bypassing the intended design in which hooks are not obtained from a remote server.

Behebungen

Hersteller-Fix, Mitigation oder Workaround, wie von den Quellen veröffentlicht.

Ein Hersteller-Fix ist verfügbar.

BehobenPLCnext Engineerphoenix_contact_psirt
Update PLCnext Engineer to 2023.6.
MitigationPLCnext Engineerphoenix_contact_psirt
To mitigate aforementioned vulnerabilities the integrity and authenticity of the git configuration data must be ensured. Otherwise, we kindly advise you to refrain from using the version control feature in version lower than 2023.6

cvss

Technischer Schweregrad, 0–10. Eine Zeile je Quelle.

7.8

010

Basiswert 0–10 · höher = schwerwiegender · Vektor überfahren zum Auflösen⚠ Quellen uneinig · medium–high · 6.8–7.8

v2.06.8mediumAV:N/AC:M/Au:N/C:P/I:P/A:Pprimary · NVD / NIST USAusnutzbarkeit 8.6 · Auswirkung 6.4

v3.07.8highCVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:Hprimary · NVD / NIST USAusnutzbarkeit 1.8 · Auswirkung 5.9

v3.07.8highCVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:Hsecondary · Phoenix Contact PSIRT DE

v3.07.8highCVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:Hsecondary · CVSS-BT (t0sche)

v3.17.8highAV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:Hsecondary · FSTEC (BDU) RU

schwächen

Die CWE-Schwächeklassen, zu denen dies gehört.

CWE-22USprimärCWE-22USCWE-254US

Exploits (15)

Öffentlicher Proof-of-Concept- und Exploit-Code.

AnonymKing/CVE-2018-11235CVE-2018-11235（PoC && Exp）PoC · poc_in_github
CHYbeta/CVE-2018-11235-DEMOCHYbeta/CVE-2018-11235-DEMOPoC · poc_in_github
H0K5/clone_and_pwnExploits CVE-2018-11235PoC · poc_in_github
Kiss-sh0t/CVE-2018-11235-pocfor git v2.7.4PoC · poc_in_github
Rezy-Dev/CVE-2018-11235exploit poc for CVE-2018-11235PoC · poc_in_github
Rogdham/CVE-2018-11235PoC exploit for CVE-2018-11235 allowing RCE on git clone --recurse-submodulesPoC · poc_in_github

betroffene Produkte (28)

Betroffene Produkte und Versionsbereiche.

n/a n/a≤ n/aenisa_euvdEU
ООО «РусБИТех-Астра» Astra Linux Special Edition≤ 1.5 «Смоленск»fstec_bduRU
Сообщество свободного программного обеспечения Git≤ 2.13.7fstec_bduRU
Сообщество свободного программного обеспечения Git2.14.0 → 2.14.4fstec_bduRU
Сообщество свободного программного обеспечения Git2.15.0 → 2.15.2fstec_bduRU
Сообщество свободного программного обеспечения Git2.16.0 → 2.16.4fstec_bduRU
Сообщество свободного программного обеспечения Git2.17.0 → 2.17.1fstec_bduRU
canonical ubuntu linux= 14.04nvdUScpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*
canonical ubuntu linux= 16.04nvdUScpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*
canonical ubuntu linux= 17.10nvdUScpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*
canonical ubuntu linux= 18.04nvdUScpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*
debian debian linux= 8.0nvdUScpe:2.3:o:debian:debian_linux:*:*:*:*:*:*:*:*
debian debian linux= 9.0nvdUScpe:2.3:o:debian:debian_linux:*:*:*:*:*:*:*:*
git-scm git≤ 2.13.6nvdUScpe:2.3:a:git-scm:git:*:*:*:*:*:*:*:*
git-scm git2.14.0 → 2.14.3nvdUScpe:2.3:a:git-scm:git:*:*:*:*:*:*:*:*
git-scm git2.15.0 → 2.15.1nvdUScpe:2.3:a:git-scm:git:*:*:*:*:*:*:*:*
git-scm git2.16.0 → 2.16.3nvdUScpe:2.3:a:git-scm:git:*:*:*:*:*:*:*:*
git-scm git= 2.17.0nvdUScpe:2.3:a:git-scm:git:*:*:*:*:*:*:*:*
gitforwindows git≤ 2.17.1nvdUScpe:2.3:a:gitforwindows:git:*:*:*:*:*:*:*:*
redhat enterprise linux= 7.0nvdUScpe:2.3:o:redhat:enterprise_linux:*:*:*:*:*:*:*:*

20 von 28 angezeigt

Advisories (1)

Hersteller- und Ökosystem-Meldungen dazu.

VDE-2023-016Phoenix Contact: PLCnext Engineer Vulnerabilities in LibGit2Sharp/LibGit22023-08-08csaf · phoenix_contact_psirtDE
Several vulnerabilities have been discovered in the LibGit2Sharp or underlying LibGit2 library.This open-source component is widely used in a lot of products worldwide.The product is vulnerable to remote code execution, privilege escalation and tampering.PLCnext Engineer is using the LibGit2Sharp library to provide version control capabilities.

auch bekannt als (4)

Weitere Namen und Kennungen dieser Entität.

quellen

Welche Quellen diesen Datensatz belegen und wann.

cnnvd enisa_euvd fstec_bdu nvd phoenix_contact_psirt NVD CVE.org MITRE

veröffentlicht 2018-05-30geändert 2026-08-10

verwandt (12,525)

Verwandte Einträge.

ID	Schweregrad	EPSS	ausnutzbar	veröffentlicht
CVE-2026-104286US	—OT kritisch	4.57% (92nd)	KEV	2026-10-01
An improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiMail 8.0.0 through 8.0.1, FortiMail 7.6.0 through 7.6.6, FortiMail…
CVE-2026-93616US	—OT kritisch	91.6% (100th)	KEV	2026-09-22
A directory traversal and file upload vulnerability allows an unauthenticated attacker to upload and execute arbitrary scripts on Check Point Management Server.
CVE-2026-85706US	—OT kritisch	97.4% (100th)	KEV	2026-09-12
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.7 before 18.11.12, 19.0 before 19.0.9, 19.1 before 19.1.8, 19.2 before 19.2.6, and 19.3 before 19.3.2…
CVE-2026-66384US	—OT kritisch	0.66% (52nd)	KEV	2026-08-12
An authenticated user may write data outside the intended Docker cache path under specific remote-repository conditions.
CVE-2026-59310US	—OT kritisch	2.56% (85th)	KEV	2026-07-30
VMware vCenter contains a directory traversal vulnerability in the Syslog server. A malicious actor with network access to vCenter may exploit this issue to execute arbitrary code.

+12520 weitere

Referenzen (37)

Externe Belege — Patches, Meldungen, Analysen.

scry

Angreifer nutzen Schwachstellen wie diese gegen im Internet exponierte Dienste aus. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan