Security Advisory

CVE-2020-12279

9.8
CRITICAL

Vulnerability Description

An issue was discovered in libgit2 before 0.28.4 and 0.9x before 0.99.0. checkout.c mishandles equivalent filenames that exist because of NTFS short names. This may allow remote code execution when cloning a repository. This issue is similar to CVE-2019-1353.
Published Date April 27, 2020
Official Source NIST NVD Advisory