Skip to content
Noroxi

cgit project records

4 published records for vendor cgit project. 0 of them have been exploited in the wild (listed in CISA KEV) and 1 have a ready-made attack tool.

Filter by product ↓

Researcher profile

Entered KEV
0 · 0%
Weaponized
1 · 25%
Pre-auth RCE
0
With a fix record
100%
Median publish → KEV
No record has entered KEV

Pre-auth RCE: flaws that let an attacker run code over the network without an account. Median publish → KEV: the typical time between a record being published and CISA listing it as exploited.

Records by year

  1. 18

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

4 records
  • CVE-2018-14912
    60This week

    cgit_clone_objects in CGit before 1.2.1 has a directory traversal vulnerability when `enable-http-clone=1` is not turned off, as demonstrate

    HighCVSS 7.5WeaponizedEPSS 91%

    cgit project · cgitAug 3, 2018

  • CVE-2016-1901
    40Plan

    Integer overflow in the authenticate_post function in CGit before 0.12 allows remote attackers to have unspecified impact via a large value

    CriticalCVSS 9.8No exploitEPSS 3%

    fedoraproject · fedoraJan 20, 2016

  • CVE-2016-1899
    15Monitor

    CRLF injection vulnerability in the ui-blob handler in CGit before 0.12 allows remote attackers to inject arbitrary HTTP headers and conduct

    LowCVSS 3.7No exploitEPSS 1%

    fedoraproject · fedoraJan 20, 2016

  • CVE-2016-1900
    15Monitor

    CRLF injection vulnerability in the cgit_print_http_headers function in ui-shared.c in CGit before 0.12 allows remote attackers with permiss

    LowCVSS 3.7No exploitEPSS 1%

    fedoraproject · fedoraJan 20, 2016