QwikSec

Security Database

CVE

CWE

Training

CVE-2024-51990

Published: Nov 7, 2024

Modified: Nov 7, 2024

PUBLISHED

Description

jj, or Jujutsu, is a Git-compatible VCS written in rust. In affected versions specially crafted Git repositories can cause `jj` to write files outside the clone. This issue has been addressed in version 0.23.0. Users are advised to upgrade. Users unable to upgrade should avoid cloning repos from unknown sources.

Vendor	Product	Versions
martinvonz	jj	affected `< 0.23.0`

Weaknesses (CWE)

References

https://github.com/martinvonz/jj/security/advisories/GHSA-88h5-6w7m-5w56

x_refsource_CONFIRM

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.