Cgit Project - vulnerabilities (CVEs)

4 CVEs in 1 products, 0 in the last 30 days, newest from 2018-08-03.

Products

• Cgit - 4 CVEs

Newest CVEs of Cgit Project

• CVE-2018-14912 - CVSS 7.5 (high), 2018-08-03: cgit_clone_objects in CGit before 1.2.1 has a directory traversal vulnerability when `enable-http-clone=1` is not turned off, as demonstrated by a…
• CVE-2016-1901 - CVSS 9.8 (critical), 2016-01-20: Integer overflow in the authenticate_post function in CGit before 0.12 allows remote attackers to have unspecified impact via a large value in the…
• CVE-2016-1900 - CVSS 3.7 (low), 2016-01-20: CRLF injection vulnerability in the cgit_print_http_headers function in ui-shared.c in CGit before 0.12 allows remote attackers with permission to write to a…
• CVE-2016-1899 - CVSS 3.7 (low), 2016-01-20: CRLF injection vulnerability in the ui-blob handler in CGit before 0.12 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response…