Gitolite

gitolite

Vendor: Gitolite • 7 CVEs

CVEs (7)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2010-2447 1Gitolite 1Gitolite Nov 21, 2024 Nov 7, 2019 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 gitolite before 1.4.1 does not filter src/ or hooks/ from path names.
CVE-2018-20683 1Gitolite 1Gitolite Nov 21, 2024 Jan 10, 2019 N/A· v4 8.1 HIGH· v3 6.8 MEDIUM· v2 commands/rsync in Gitolite before 3.6.11, if .gitolite.rc enables rsync, mishandles the rsync command line, which allows attackers to have a "bad" impact by triggering use of an option other than -v, -n, -q, or -P.
CVE-2013-7203 1Gitolite 1Gitolite Nov 21, 2024 Sep 21, 2018 N/A· v4 5.5 MEDIUM· v3 2.1 LOW· v2 gitolite before commit fa06a34 might allow local users to read arbitrary files in repositories via vectors related to the user umask when running gitolite setup.
CVE-2013-4451 1Gitolite 1Gitolite Nov 21, 2024 Sep 21, 2018 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 gitolite commit fa06a34 through 3.5.3 might allow attackers to have unspecified impact via vectors involving world-writable permissions when creating (1) ~/.gitolite.rc, (2) ~/.gitolite, or (3) ~/repositories/gitolite-ad...Show more gitolite commit fa06a34 through 3.5.3 might allow attackers to have unspecified impact via vectors involving world-writable permissions when creating (1) ~/.gitolite.rc, (2) ~/.gitolite, or (3) ~/repositories/gitolite-admin.git on fresh installs.Show less
CVE-2018-16976 1Gitolite 1Gitolite Nov 21, 2024 Sep 12, 2018 N/A· v4 8.1 HIGH· v3 5.5 MEDIUM· v2 Gitolite before 3.6.9 does not (in certain configurations involving @all or a regex) properly restrict access to a Git repository that is in the process of being migrated until the full set of migration steps has been co...Show more Gitolite before 3.6.9 does not (in certain configurations involving @all or a regex) properly restrict access to a Git repository that is in the process of being migrated until the full set of migration steps has been completed. This can allow valid users to obtain unintended access.Show less
CVE-2012-4506 2Gitolite Sitaram Chamarty 2Gitolite Gitolite Apr 29, 2026 Oct 22, 2012 N/A· v4 N/A· v3 4.6 MEDIUM· v2 Directory traversal vulnerability in gitolite 3.x before 3.1, when wild card repositories and a pattern matching "../" are enabled, allows remote authenticated users to create arbitrary repositories and possibly perform...Show more Directory traversal vulnerability in gitolite 3.x before 3.1, when wild card repositories and a pattern matching "../" are enabled, allows remote authenticated users to create arbitrary repositories and possibly perform other actions via a .. (dot dot) in a repository name.Show less
CVE-2011-1572 1Gitolite 1Gitolite Apr 29, 2026 Oct 4, 2011 N/A· v4 N/A· v3 6.8 MEDIUM· v2 Directory traversal vulnerability in the Admin Defined Commands (ADC) feature in gitolite before 1.5.9.1 allows remote attackers to execute arbitrary commands via .. (dot dot) sequences in admin-defined commands.