Miembros de
Boletines de Vulnerabilidades |
DSA-4263 cgit - security update |
|
| Software afectado | Debian |
|
Jann Horn discovered a directory traversal vulnerability in cgit, a fastweb frontend for git repositories written in C. A remote attacker cantake advantage of this flaw to retrieve arbitrary files via a speciallycrafted request, when enable-http-clone=1 (default) is not turned off. More info: https://www.debian.org/security/2018/dsa-4263 |
|
