CVE-2018-14912

cgitcloneobjects in CGit before 1.2.1 has a directory traversal vulnerability when "enable-http-clone=1" is not turned off, as demonstrated by a cgit/cgit.cgi/git/objects/?path=../ request...

cgit 1.2.1 - cgit_clone_objects() Directory Traversal

cgit 1.2.1 - cgitcloneobjects Directory Traversal There is a directory traversal vulnerability in cgitcloneobjects, reachable when the configuration flag enable-http-clone is set to 1 default: void cgitcloneobjectsvoid if !ctx.qry.path cgitprinterrorpage400, "Bad request", "Bad request"; return; ...

CVE-2018-14912: Improper Limitation of a Pathname to a Restricted Directory

cgitcloneobjects in CGit before 1.2.1 has a directory traversal vulnerability when enable-http-clone=1 is not turned off, as demonstrated by a cgit/cgit.cgi/git/objects/?path=../ request...