Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2008-5916
4.6
MEDIUMCVSS v2
Published
January 21, 2009
Affected
2 projects
Assigned by
MITRE
Severity scale
010
Description
gitweb/gitweb.perl in gitweb in Git 1.6.x before 1.6.0.6, 1.5.6.x before 1.5.6.6, 1.5.5.x before 1.5.5.6, 1.5.4.x before 1.5.4.7, and other versions after 1.4.3 allows local repository owners to execute arbitrary commands by modifying the diff.external configuration variable and executing a crafted gitweb query.
git/git
GitHubGit Source Code Mirror - This is a publish-only repository but pull requests can be turned into patches to the mailing list via GitGitGadget (https://gitgitgadget.github.io/). Please follow Documentation/SubmittingPatches procedure for any of your improvements.
GitHubGit Source Code Mirror - This is a publish-only repository but pull requests can be turned into patches to the mailing list via GitGitGadget (https://gitgitgadget.github.io/). Please follow Documentation/SubmittingPatches procedure for any of your improvements.= 1.5.4, = 1.5.0.7, = 1.5.5, = 1.5.6.5, = 1.5.0, = 1.5.0.3, = 1.5.2.5, = 1.5.1.4, = 1.5.3.1, = 1.6.0.2, = 1.6.0.3, = 1.5.6.3, = 1.5.5.4, = 1.5.4.3, = 1.4.4.1, = 1.5.2.3, = 1.5.6.4, = 1.5.1.3, = 1.5.3.8, = 1.5.5.1, = 1.4.3.3, = 1.5.3, = 1.6.0, = 1.5.4.1, = 1.5.2.1, = 1.5.3.3, = 1.5.5.3, = 1.5.4.2, = 1.4.4, = 1.5.0.4, = 1.5.1.1, = 1.5.1.2, = 1.5.2.2, = 1.5.3.5, = 1.6.0.5, = 1.5.4.4, = 1.4.3.1, = 1.4.4.3, = 1.5.0.6, = 1.5.2.4, = 1.5.4.6, = 1.4.3.2, = 1.4.4.4, = 1.5.1.5, = 1.6.0.1, = 1.5.6, = 1.5.5.2, = 1.5.0.1, = 1.5.0.2, = 1.5.2, = 1.5.6.2, = 1.5.3.4, = 1.5.3.6, = 1.6.0.4, = 1.5.5.5, = 1.5.4.5, = 1.4.4.2, = 1.5.0.5, = 1.5.3.7, = 1.5.1.6, = 1.5.6.1, = 1.4.3.4, = 1.4.3.5, = 1.5.1, = 1.5.3.2NVD
git-for-windows/gitGitHubA fork of Git containing Windows-specific patches.
GitHubA fork of Git containing Windows-specific patches.