2 matches found
Updated cgit packages fix security vulnerability
Jann Horn discovered a directory traversal vulnerability in cgit, a fast web frontend for git repositories written in C. A remote attacker can take advantage of this flaw to retrieve arbitrary files via a specially crafted request, when 'enable-http-clone=1' default is not turned off...
7.5CVSS3.4AI score0.9288EPSS
SaveExploits7References2
Debian DSA-4263-1 : cgit - security update
Jann Horn discovered a directory traversal vulnerability in cgit, a fast web frontend for git repositories written in C. A remote attacker can take advantage of this flaw to retrieve arbitrary files via a specially crafted request, when 'enable-http-clone=1' default is not turned off. C Tenable...
7.5CVSS7.4AI score0.9288EPSS
SaveExploits7References5
20