GitProxy is an application that stands between developers and a Git remote endpoint (e.g., github.com). Versions 1.19.1 and below allow users to push to remote repositories while bypassing policies and explicit approvals. Since checks and plugins are skipped, code containing secrets or unwanted changes could be pushed into a repository. This is fixed in version 1.19.2.
CVSS Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:XFinos Gitproxy
APPFinos< 1.19.2
π΅
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
CWE
Related vulnerabilities
CVE-2025-54584HIGH7.0ten sam produkt
GitProxy is an application that stands between developers and a Git remote endpoint (e.g., github.com). In ver...
CVE-2025-54585HIGH8.2ten sam produkt
GitProxy is an application that stands between developers and a Git remote endpoint. In versions 1.19.1 and be...
CVE-2025-54586HIGH7.1ten sam produkt
GitProxy is an application that stands between developers and a Git remote endpoint. In versions 1.19.1 and be...