Cgit_project Cgit
4 CVEs affecting Cgit_project Cgit. Latest disclosed: 2018-08-03. Critical: 1, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2016-1901 | Critical | 9.8 | 2016-01-20 | Integer overflow in the authenticate_post function in CGit before 0.12 allows remote attackers to have unspecified impact via a large value in the Content-Leng… |
CVE-2018-14912 | High | 7.5 | 2018-08-03 | cgit_clone_objects in CGit before 1.2.1 has a directory traversal vulnerability when `enable-http-clone=1` is not turned off, as demonstrated by a cgit/cgit.cg… |
CVE-2016-1900 | Low | 3.7 | 2016-01-20 | CRLF injection vulnerability in the cgit_print_http_headers function in ui-shared.c in CGit before 0.12 allows remote attackers with permission to write to a r… |
CVE-2016-1899 | Low | 3.7 | 2016-01-20 | CRLF injection vulnerability in the ui-blob handler in CGit before 0.12 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response spli… |