gitolite kayıtları
gitolite üreticisine ait 7 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 1
- Düzeltme kaydı olan
- %57,1
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-20 Improper Input Validation2
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')2
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor1
- CWE-264 Permissions, Privileges, and Access Controls1
- CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
7 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
40Planlayın | CVE-2013-4451İstismar yok | gitolite commit fa06a34 through 3.5.3 might allow attackers to have unspecified impact via vectors involving world-writable permissions whengitolite · gitolite · CWE-264 | Kritik9,8 | — | %3,1 | 21 Eyl 2018 |
40Planlayın | CVE-2010-2447İstismar yok | gitolite before 1.4.1 does not filter src/ or hooks/ from path names.gitolite · gitolite · CWE-20 | Kritik9,8 | — | %1,8 | 7 Kas 2019 |
33İzleyin | CVE-2018-20683İstismar yok | commands/rsync in Gitolite before 3.6.11, if .gitolite.rc enables rsync, mishandles the rsync command line, which allows attackers to have agitolite · gitolite · CWE-20 | Yüksek8,1 | — | %2,0 | 9 Oca 2019 |
32İzleyin | CVE-2018-16976İstismar yok | Gitolite before 3.6.9 does not (in certain configurations involving @all or a regex) properly restrict access to a Git repository that is ingitolite · gitolite · CWE-362 | Yüksek8,1 | — | %1,2 | 12 Eyl 2018 |
28İzleyin | CVE-2011-1572İstismar yok | Directory traversal vulnerability in the Admin Defined Commands (ADC) feature in gitolite before 1.5.9.1 allows remote attackers to execute gitolite · gitolite · CWE-22 | Orta6,8 | — | %2,9 | 4 Eki 2011 |
22İzleyin | CVE-2013-7203İstismar yok | gitolite before commit fa06a34 might allow local users to read arbitrary files in repositories via vectors related to the user umask when rugitolite · gitolite · CWE-200 | Orta5,5 | — | %0,4 | 21 Eyl 2018 |
19İzleyin | CVE-2012-4506İstismar yok | Directory traversal vulnerability in gitolite 3.x before 3.1, when wild card repositories and a pattern matching "../" are enabled, allows rgitolite · gitolite · CWE-22 | Orta4,6 | — | %2,1 | 22 Eki 2012 |
- CVE-2013-445140Planlayın
gitolite commit fa06a34 through 3.5.3 might allow attackers to have unspecified impact via vectors involving world-writable permissions when
KritikCVSS 9,8İstismar yokEPSS %3gitolite · gitolite21 Eyl 2018
- CVE-2010-244740Planlayın
gitolite before 1.4.1 does not filter src/ or hooks/ from path names.
KritikCVSS 9,8İstismar yokEPSS %2gitolite · gitolite7 Kas 2019
- CVE-2018-2068333İzleyin
commands/rsync in Gitolite before 3.6.11, if .gitolite.rc enables rsync, mishandles the rsync command line, which allows attackers to have a
YüksekCVSS 8,1İstismar yokEPSS %2gitolite · gitolite9 Oca 2019
- CVE-2018-1697632İzleyin
Gitolite before 3.6.9 does not (in certain configurations involving @all or a regex) properly restrict access to a Git repository that is in
YüksekCVSS 8,1İstismar yokEPSS %1gitolite · gitolite12 Eyl 2018
- CVE-2011-157228İzleyin
Directory traversal vulnerability in the Admin Defined Commands (ADC) feature in gitolite before 1.5.9.1 allows remote attackers to execute
OrtaCVSS 6,8İstismar yokEPSS %3gitolite · gitolite4 Eki 2011
- CVE-2013-720322İzleyin
gitolite before commit fa06a34 might allow local users to read arbitrary files in repositories via vectors related to the user umask when ru
OrtaCVSS 5,5İstismar yokEPSS %0gitolite · gitolite21 Eyl 2018
- CVE-2012-450619İzleyin
Directory traversal vulnerability in gitolite 3.x before 3.1, when wild card repositories and a pattern matching "../" are enabled, allows r
OrtaCVSS 4,6İstismar yokEPSS %2gitolite · gitolite22 Eki 2012