Path Traversal in Gitolite

CVE-2011-1572

Directory traversal vulnerability in the Admin Defined Commands (ADC) feature in gitolite before 1.5.9.1 allows remote attackers to execute arbitrary commands via .. (dot dot) sequences in admin-defined commands.

Vulnerability class: Path Traversal (Directory Traversal)

EPSS: 0.029 (85.6th percentile) — read the EPSS interpretation.

Affected products

  • Gitolite — versions 0.50, 0.55, 0.60
  • N/a — versions n/a

Weakness classification (CWE)

References