cbcvebase.

Jason A Donenfeld Cgit vulnerabilities

1 known vulnerability affecting jason_a_donenfeld/cgit.

Total CVEs
1
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
MEDIUM1

Vulnerabilities

Page 1 of 1
CVE-2013-2117P4MEDIUMCVSS 4.3≤ 0.9.12013-08-09
CVE-2013-2117 [MEDIUM] CWE-22 CVE-2013-2117: Directory traversal vulnerability in the cgit_parse_readme function in ui-summary.c in cgit before 0 Directory traversal vulnerability in the cgit_parse_readme function in ui-summary.c in cgit before 0.9.2, when a readme file is set to a filesystem path, allows remote attackers to read arbitrary files via a .. (dot dot) in the url parameter.
nvd
Jason A Donenfeld Cgit vulnerabilities | cvebase