CVE-2013-4663

git_http_controller.rb in the redmine_git_hosting plugin for Redmine allows remote attackers to execute arbitrary commands via shell metacharacters in (1) the…

published December 28, 2014

CVSS
—
EPSS
2%
Percentile
80.0
In the wild
Unconfirmed
What it is

git_http_controller.rb in the redmine_git_hosting plugin for Redmine allows remote attackers to execute arbitrary commands via shell metacharacters in (1) the service parameter to info/refs, related to the get_info_refs function or (2) the reqfile argument to the file_exists function.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01944 · 80.0th percentile
Published
2014-12-28T00:00Z
EPSS history
Timeline
  • 28 DEC 00:00Z
    git_http_controller.rb in the redmine_git_hosting plugin for Redmine allows remote attackers to execute arbitrary commands via shell metacharacters in (1) the…
    cvelistv5