CVE-2018-20683

commands/rsync in Gitolite before 3.6.11, if .gitolite.rc enables rsync, mishandles the rsync command line, which allows attackers to have a "bad" impact by…

published January 10, 2019

CVSS
—
EPSS
2%
Percentile
80.7
In the wild
Unconfirmed
What it is

commands/rsync in Gitolite before 3.6.11, if .gitolite.rc enables rsync, mishandles the rsync command line, which allows attackers to have a "bad" impact by triggering use of an option other than -v, -n, -q, or -P.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02009 · 80.7th percentile
Published
2019-01-10T01:00Z
EPSS history
Timeline
  • 10 JAN 01:00Z
    commands/rsync in Gitolite before 3.6.11, if .gitolite.rc enables rsync, mishandles the rsync command line, which allows attackers to have a "bad" impact by…
    cvelistv5