Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2014-5023

Опубликовано: 22 июл. 2014
Источник: nvd
CVSS2: 6.8
EPSS Низкий

Описание

Repository.php in Gitter, as used in Gitlist, allows remote attackers with commit privileges to execute arbitrary commands via shell metacharacters in a branch name, as demonstrated by a "git checkout -b" command.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:gitlist:gitlist:-:*:*:*:*:*:*:*

EPSS

Процентиль: 88%
0.04055
Низкий

6.8 Medium

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

debian
больше 11 лет назад

Repository.php in Gitter, as used in Gitlist, allows remote attackers ...

github
больше 3 лет назад

Repository.php in Gitter, as used in Gitlist, allows remote attackers with commit privileges to execute arbitrary commands via shell metacharacters in a branch name, as demonstrated by a "git checkout -b" command.

EPSS

Процентиль: 88%
0.04055
Низкий

6.8 Medium

CVSS2

Дефекты

NVD-CWE-Other