GitProxy is an application that stands between developers and a Git remote endpoint (e.g., github.com). Versions 1.19.1 and below allow users to push to remote repositories while bypassing policies and explicit approvals. Since checks and plugins are skipped, code containing secrets or unwanted changes could be pushed into a repository. This is fixed in version 1.19.2.
References
| Link | Resource |
|---|---|
| https://github.com/finos/git-proxy/commit/a620a2f33c39c78e01783a274580bf822af3cc3a | Patch |
| https://github.com/finos/git-proxy/commit/bd2ecb2099cba21bca3941ee4d655d2eb887b3a9 | Patch |
| https://github.com/finos/git-proxy/releases/tag/v1.19.2 | Patch Release Notes |
| https://github.com/finos/git-proxy/security/advisories/GHSA-qr93-8wwf-22g4 | Exploit Third Party Advisory |
Configurations
History
01 Aug 2025, 20:04
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 6.5 |
| First Time |
Finos gitproxy
Finos |
|
| CPE | cpe:2.3:a:finos:gitproxy:*:*:*:*:*:*:*:* | |
| References | () https://github.com/finos/git-proxy/commit/bd2ecb2099cba21bca3941ee4d655d2eb887b3a9 - Patch | |
| References | () https://github.com/finos/git-proxy/releases/tag/v1.19.2 - Patch, Release Notes | |
| References | () https://github.com/finos/git-proxy/security/advisories/GHSA-qr93-8wwf-22g4 - Exploit, Third Party Advisory | |
| References | () https://github.com/finos/git-proxy/commit/a620a2f33c39c78e01783a274580bf822af3cc3a - Patch |
30 Jul 2025, 20:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-07-30 20:15
Updated : 2025-08-01 20:04
NVD link : CVE-2025-54583
Mitre link : CVE-2025-54583
JSON object : View
Products Affected
finos
- gitproxy
CWE
CWE-863
Incorrect Authorization