GitProxy is an application that stands between developers and a Git remote endpoint (e.g., github.com). Versions 1.19.1 and below allow users to push to remote repositories while bypassing policies and explicit approvals. Since checks and plugins are skipped, code containing secrets or unwanted changes could be pushed into a repository. This is fixed in version 1.19.2.
CVSS Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:XFinos Gitproxy
APPFinos< 1.19.2
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
CWE
Related vulnerabilities
CVE-2025-54584HIGH7.0same product
GitProxy is an application that stands between developers and a Git remote endpoint (e.g., github.com). In ver...
CVE-2025-54585HIGH8.2same product
GitProxy is an application that stands between developers and a Git remote endpoint. In versions 1.19.1 and be...
CVE-2025-54586HIGH7.1same product
GitProxy is an application that stands between developers and a Git remote endpoint. In versions 1.19.1 and be...