Cgit

cgit

Vendor: Jason A Donenfeld • 1 CVE

CVEs (1)

CVE

VENDORS

PRODUCTS

UPDATED

PUBLISHED

CVSS

CVE-2013-2117

2Jason A Donenfeld

Lars Hjemli

2Cgit

Cgit

Apr 29, 2026

Aug 9, 2013

N/A· v4

N/A· v3

4.3 MEDIUM· v2

Directory traversal vulnerability in the cgit_parse_readme function in ui-summary.c in cgit before 0.9.2, when a readme file is set to a filesystem path, allows remote attackers to read arbitrary files via a .. (dot dot)...Show more