Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2008-5517
7.5
HIGHCVSS v2
Published
January 13, 2009
Affected
2 projects
Assigned by
Red Hat
Severity scale
010
Description
The web interface in git (gitweb) 1.5.x before 1.5.6 allows remote attackers to execute arbitrary commands via shell metacharacters related to (1) git_snapshot and (2) git_object.
git/git
GitHubGit Source Code Mirror - This is a publish-only repository but pull requests can be turned into patches to the mailing list via GitGitGadget (https://gitgitgadget.github.io/). Please follow Documentation/SubmittingPatches procedure for any of your improvements.
GitHubGit Source Code Mirror - This is a publish-only repository but pull requests can be turned into patches to the mailing list via GitGitGadget (https://gitgitgadget.github.io/). Please follow Documentation/SubmittingPatches procedure for any of your improvements.= 1.5.4, = 1.5.0.7, = 1.5.0, = 1.5.0.3, = 1.5.2.5, = 1.5.1.4, = 1.5.3.1, = 1.5.4.1, = 1.5.1.5, = 1.5.3.8, = 1.5.3, = 1.5.0.1, = 1.5.0.2, = 1.5.3.3, = 1.5.4.6, = 1.5.4.7, = 1.5.2.1, = 1.5.2.2, = 1.5.3.5, = 1.5.1.3, = 1.5.2.3, = 1.5.4.3, = 1.5.0.4, = 1.5.4.4, = 1.5.4.5, = 1.5.1.6, = 1.5.2, = 1.5.3.2, = 1.5.1, = 1.5.1.1, = 1.5.3.4, = 1.5.0.5, = 1.5.0.6, = 1.5.1.2, = 1.5.2.4, = 1.5.3.6, = 1.5.3.7, = 1.5.4.2NVD
git-for-windows/gitGitHubA fork of Git containing Windows-specific patches.
GitHubA fork of Git containing Windows-specific patches.= 1.5.4, = 1.5.0.7, = 1.5.0, = 1.5.0.3, = 1.5.2.5, = 1.5.1.4, = 1.5.3.1, = 1.5.4.1, = 1.5.1.5, = 1.5.3.8, = 1.5.3, = 1.5.0.1, = 1.5.0.2, = 1.5.3.3, = 1.5.4.6, = 1.5.4.7, = 1.5.2.1, = 1.5.2.2, = 1.5.3.5, = 1.5.1.3, = 1.5.2.3, = 1.5.4.3, = 1.5.0.4, = 1.5.4.4, = 1.5.4.5, = 1.5.1.6, = 1.5.2, = 1.5.3.2, = 1.5.1, = 1.5.1.1, = 1.5.3.4, = 1.5.0.5, = 1.5.0.6, = 1.5.1.2, = 1.5.2.4, = 1.5.3.6, = 1.5.3.7, = 1.5.4.2