← Back

CVE-2012-4548

nvd nist
Published: Nov 11, 2012Modified: Apr 29, 2026

JSON object

Loading...
6.0
Vector
AV:N/AC:M/Au:S/C:P/I:P/A:P
Exploitability: 6.8 / Impact: 6.4
Source: NVD

Description

Argument injection vulnerability in syntax-highlighting.sh in cgit 9.0.3 and earlier allows remote authenticated users with permissions to add files to execute arbitrary commands via the --plug-in argument to the highlight command.

Affected (28)

Products: Lars Hjemli: Cgit
Lars Hjemli
1 product
Cgit
Configuration A
28 vulnerable
Vulnerable SoftwareAffected Versions
Lars Hjemli
Cgit
Up to 0.9.0.3
Cgit
Version 0.1
Cgit
Version 0.2
Cgit
Version 0.3
Cgit
Version 0.4
Cgit
Version 0.5
Cgit
Version 0.6.1
Cgit
Version 0.6.2
Cgit
Version 0.6.3
Cgit
Version 0.6
Cgit
Version 0.7.1
Cgit
Version 0.7.2
Cgit
Version 0.7
Cgit
Version 0.8.1.1
Cgit
Version 0.8.1
Cgit
Version 0.8.2.1
Cgit
Version 0.8.2.2
Cgit
Version 0.8.2
Cgit
Version 0.8.3.1
Cgit
Version 0.8.3.2
Cgit
Version 0.8.3.3
Cgit
Version 0.8.3.4
Cgit
Version 0.8.3.5
Cgit
Version 0.8.3
Cgit
Version 0.8
Cgit
Version 0.9.0.1
Cgit
Version 0.9.0.2
Cgit
Version 0.9

References (26)

Source: secalert@redhat.com
Source: secalert@redhat.com
Source: secalert@redhat.com
Source: secalert@redhat.com
Source: secalert@redhat.com
Source: secalert@redhat.com
Vendor Advisory
Source: secalert@redhat.com
Vendor Advisory
Source: secalert@redhat.com
Source: secalert@redhat.com
Source: secalert@redhat.com
Source: secalert@redhat.com
Source: secalert@redhat.com
Source: secalert@redhat.com
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.