CVE-2026-84149:详情

CVE-2026-84149

2026-09-01
13h20 +00:00
2026-09-01
16h17 +00:00
指定 CVE 通知
随时了解指定 CVE 的变更。
管理通知

CVE 描述

This vulnerability exists in the ERP system due to exposure of repository information through a publicly accessible .git directory. An unauthenticated remote attacker could exploit this vulnerability by accessing the exposed .git directory and retrieving repository metadata and associated files, which could allow reconstruction of the application's source code.

CVE 信息

相关弱点

CWE-ID 弱点名称 来源
CWE-527 Exposure of Version-Control Repository to an Unauthorized Control Sphere
The product stores a CVS, git, or other source-control repository in a directory, archive, or other resource that is stored, transferred, or otherwise made accessible to unauthorized actors.

参考资料