CVE-2018-14912
cgit_clone_objects in CGit before 1.2.1 has a directory traversal vulnerability when `enable-http-clone=1` is not turned off, as demonstrated by a…
published August 3, 2018
Patch now
High probability of exploitation
NVD has not assigned a CVSS score to this record. It sits in the 99.8th percentile for exploit probability.
What it is
cgit_clone_objects in CGit before 1.2.1 has a directory traversal vulnerability when `enable-http-clone=1` is not turned off, as demonstrated by a cgit/cgit.cgi/git/objects/?path=../ request.
The record
Technical detail
- CVSS
- Not scored
- CVSS v4.0
- Not supplied
- EPSS
- 0.91880 · 99.8th percentile
- Published
- 2018-08-03T19:00Z
EPSS history
Timeline