CVE-2014-5023
6.8
Vector
AV:N/AC:M/Au:N/C:P/I:P/A:P
Exploitability: 8.6 / Impact: 6.4
Source: NVD
Description
Repository.php in Gitter, as used in Gitlist, allows remote attackers with commit privileges to execute arbitrary commands via shell metacharacters in a branch name, as demonstrated by a "git checkout -b" command.
Affected (1)
References (2)
Source: af854a3a-2127-422b-91ae-364da2661108
Exploit
Timeline
No history available yet.