Design/Logic Flaw

2019-04-2420:29:00

PRIOn knowledge base

www.prio-n.com

9.3 High

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

69.7%

JSON

The GitController in Jakub Chodounsky Bonobo Git Server before 6.5.0 allows execution of arbitrary commands in the context of the web server via a crafted http request.

CPENameOperatorVersion
bonobo_git_serverlt6.5.0

CPE	Name	Operator	Version
	bonobo_git_server	lt	6.5.0

References

bonobogitserver.com/changelog/

flab.cesnet.cz/advisories/cve-2019-11217