CVE-2018-14912

Published: 2018-08-03T19:29Z

Last Modified: 2024-11-21T03:50Z

Source: MITRE CVE List

License: MITRE-CVE-TOS

cgit_clone_objects in CGit before 1.2.1 has a directory traversal vulnerability when `enable-http-clone=1` is not turned off, as demonstrated by a cgit/cgit.cgi/git/objects/?path=../ request. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt