CVE-2018-14912

CVE-2018-14912 affects CGit prior to 1.2.1. The vulnerability is a directory traversal in cgit_clone_objects() that can be triggered when enable-http-clone is not disabled, allowing a remote attacker to retrieve arbitrary files via requests like cgit/cgit.cgi/git/objects/?path=../. Multiple advis...