CVE-2014-5023

Repository.php in Gitter, as used in Gitlist, allows remote attackers with commit privileges to execute arbitrary commands via shell metacharacters in a branch name, as demonstrated by a "git checkout -b" command.

Score

CVSS 2.0 6.8 Medium

Status

Modified - cve@mitre.org

Published

2014-07-22

Last modified

2024-09-17

Affected products

• Gitlist (Gitlist)

References

• http://hatriot.github.io/blog/2014/06/29/gitlist-rce/