CVE-2012-4506

Published October 22nd, 2012

View on NVD ↗

CVSS v3

N/A

CVSS v2

4.6

MEDIUM

Affected

PROJECT

Description

Directory traversal vulnerability in gitolite 3.x before 3.1, when wild card repositories and a pattern matching "../" are enabled, allows remote authenticated users to create arbitrary repositories and possibly perform other actions via a .. (dot dot) in a repository name.

sitaramc/gitolite

Hosting git repositories -- Gitolite allows you to setup git hosting on a central server, with very fine-grained access control and many (many!) more powerful features.

GitHub

8.58K