RSS   Podatności dla 'Gitolite'   RSS

2019-11-07
 
CVE-2010-2447

CWE-20
 
 
gitolite before 1.4.1 does not filter src/ or hooks/ from path names.

 
2018-09-21
 
CVE-2013-7203

CWE-200
 
 
gitolite before commit fa06a34 might allow local users to read arbitrary files in repositories via vectors related to the user umask when running gitolite setup.

 
2018-09-12
 
CVE-2018-16976

CWE-362
 
 
Gitolite before 3.6.9 does not (in certain configurations involving @all or a regex) properly restrict access to a Git repository that is in the process of being migrated until the full set of migration steps has been completed. This can allow valid users to obtain unintended access.

 
2012-10-22
 
CVE-2012-4506

CWE-22
 
 
Directory traversal vulnerability in gitolite 3.x before 3.1, when wild card repositories and a pattern matching "../" are enabled, allows remote authenticated users to create arbitrary repositories and possibly perform other actions via a .. (dot dot) in a repository name.

 
2011-10-04
 
CVE-2011-1572

CWE-22
 
 
Directory traversal vulnerability in the Admin Defined Commands (ADC) feature in gitolite before 1.5.9.1 allows remote attackers to execute arbitrary commands via .. (dot dot) sequences in admin-defined commands.

 

Copyright 2024, cxsecurity.com

 

Back to Top