Login Request a demo
CG
Product
Cgit
by Cgit Project · last CVE Aug 3, 2018
4
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities4In the news0Timeline
Severity mix
Critical 1High 1Medium 0Low 2
Severity
All severities4Critical1High1Medium0Low2
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Cgit to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2016-1901
9.8
4%
Jan 20
Integer overflow in the authenticate_post function in CGit before 0.12 allows remote attackers to have unspecified impact via a large value in the Content-Length HTTP header,…
Affected: through 0.11.2
CVE-2018-14912
7.5
92%
Aug 3
cgit_clone_objects in CGit before 1.2.1 has a directory traversal vulnerability when `enable-http-clone=1` is not turned off, as demonstrated by a…
Affected: before 1.2.1
CVE-2016-1900
3.7
2%
Jan 20
CRLF injection vulnerability in the cgit_print_http_headers function in ui-shared.c in CGit before 0.12 allows remote attackers with permission to write to a repository to inject…
Affected: through 0.11.2
CVE-2016-1899
3.7
2%
Jan 20
CRLF injection vulnerability in the ui-blob handler in CGit before 0.12 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks or…
Affected: through 0.11.2
Showing 4