CVE-2026-84149 : 詳細

CVE-2026-84149

2026-09-01
13h20 +00:00
2026-09-01
16h17 +00:00
特定のCVEの通知
特定のCVEの変更情報をいち早くお届けします。
通知を管理する

CVE の説明

This vulnerability exists in the ERP system due to exposure of repository information through a publicly accessible .git directory. An unauthenticated remote attacker could exploit this vulnerability by accessing the exposed .git directory and retrieving repository metadata and associated files, which could allow reconstruction of the application's source code.

CVE の情報

関連する弱点

CWE-ID 弱点名 出典
CWE-527 Exposure of Version-Control Repository to an Unauthorized Control Sphere
The product stores a CVS, git, or other source-control repository in a directory, archive, or other resource that is stored, transferred, or otherwise made accessible to unauthorized actors.

参考資料