cveboard RSS feed

CVE-2025-27613

CVE.org · Published

Historical CVEsJSONAI instructions

Record status
Published
Identifier year (not publication year)
2025
Source publication
Source updated
Imported by cveboard
Source snapshot
cve_2026-10-24_midnight_baseline ·

Plain text

CNA source text (English)

Gitk can create and truncate files in the user's home directory

Gitk is a Tcl/Tk based Git history browser. Starting with 1.7.0, when a user clones an untrusted repository and runs gitk without additional command arguments, files for which the user has write permission can be created and truncated. The option Support per-file encoding must have been enabled before in Gitk's Preferences. This option is disabled by default. The same happens when Show origin of this line is used in the main window (regardless of whether Support per-file encoding is enabled or not). This vulnerability is fixed in 2.43.7, 2.44.4, 2.45.4, 2.46.4, 2.47.3, 2.48.2, 2.49.1, and 2.50.1.

Scoped product and version facts

Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.

Exploitation unknown; this catalogue does not assess exploitation.

gitk

Vendor
j6t
Product
gitk
Platforms
Unknown
Default status
Unknown
gitk · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
>= 1.7.0, < 2.43.7affectedUnavailableUnavailableUnavailableNone listed
>= 2.44.0, < 2.44.4affectedUnavailableUnavailableUnavailableNone listed
>= 2.45.0, < 2.45.4affectedUnavailableUnavailableUnavailableNone listed
>= 2.46.0, < 2.46.4affectedUnavailableUnavailableUnavailableNone listed
>= 2.47.0, < 2.47.3affectedUnavailableUnavailableUnavailableNone listed
>= 2.48.0, < 2.48.2affectedUnavailableUnavailableUnavailableNone listed
>= 2.49.0, < 2.49.1affectedUnavailableUnavailableUnavailableNone listed
>= 2.50.0, < 2.50.1affectedUnavailableUnavailableUnavailableNone listed