CVE-2019-1351

CVE Database · CVE-2019-1351

CVE-2019-1351

· HIGHModified

CVSS v3.1

7.5

EPSS

8.72%

Published

Jan 24, 2020

Modified

Nov 21, 2024

Public PoC / Exploit (1)

All weaponized →

TrickestTrickest PoC index

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

A tampering vulnerability exists when Git for Visual Studio improperly handles virtual drive paths, aka 'Git for Visual Studio Tampering Vulnerability'.

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Weaknesses (CWE)

CWE-706

Affected Products (3)

microsoft · visual_studio_2017 (up to 15.9.18)vulnerable

microsoft · visual_studio_2019 (up to 16.4.1)vulnerable

opensuse · leapvulnerable

References (10)

http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00056.html

Third Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2020-05/msg00003.html

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1351

PatchVendor Advisory

https://public-inbox.org/git/xmqqr21cqcn9.fsf%40gitster-ct.c.googlers.com/

https://security.gentoo.org/glsa/202003-30

http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00056.html

Third Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2020-05/msg00003.html

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1351

KEV Catalog EPSS Scores Vendors All CVEs