Vulnerability in Gitlist
CVE-2014-5023
Repository.php in Gitter, as used in Gitlist, allows remote attackers with commit privileges to execute arbitrary commands via shell metacharacters in a branch name, as demonstrated by a "git checkout -b" command.
EPSS: 0.034 (87.5th percentile) — read the EPSS interpretation.
Affected products
- Gitlist
- N/a — versions n/a
References
- cve@mitre.org (Exploit, x_refsource_MISC)