Unscored severity · published Dec 11, 2015
CVE-2015-7082
Multiple unspecified vulnerabilities in Git before 2.5.4, as used in Apple Xcode before 7.2, have unknown impact and attack vectors
–
CVSS
1.7%
EPSS
No
On KEV
Description
Multiple unspecified vulnerabilities in Git before 2.5.4, as used in Apple Xcode before 7.2, have unknown impact and attack vectors. NOTE: this CVE is associated only with Xcode use cases.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.7% · higher than 77% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
GI
Git · Git Project
through 2.5.3 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2015-7082
CVE.org
https://www.cve.org/CVERecord?id=CVE-2015-7082
Vendor Advisory
http://lists.apple.com/archives/security-announce/2015/Dec/msg00004.html
www.securitytracker.com
http://www.securitytracker.com/id/1034340
Vendor Advisory
https://github.com/git/git/blob/master/Documentation/RelNotes/2.5.4.txt
Vendor Advisory
https://support.apple.com/HT205642
More from Git
9.8
CVE-2021-23632
All versions of package git are vulnerable to Remote Code Execution (RCE) due to missing sanitization in the Git.git method, which allows execution of OS commands rather than just…
9.8
CVE-2015-7545
The (1) git-remote-ext and (2) unspecified other remote helper programs in Git before 2.3.10, 2.4.x before 2.4.10, 2.5.x before 2.5.4, and 2.6.x before 2.6.1 do not properly…