Gitolite vulnerabilities

Products

• Gitolite 7

Newest

• gitolite gitolite before 1.4.1 does not filter src/ or hooks/ from path names. CVE-2010-2447 9.8 CriticalNovember 7, 2019
• gitolite commands/rsync in Gitolite before 3.6.11, if .gitolite.rc enables rsync, mishandles the rsync... CVE-2018-20683 Fix available 8.1 HighJanuary 10, 2019
• gitolite gitolite before commit fa06a34 might allow local users to read arbitrary files in repositories... CVE-2013-7203 Fix available 5.5 MediumSeptember 21, 2018
• gitolite gitolite commit fa06a34 through 3.5.3 might allow attackers to have unspecified impact via... CVE-2013-4451 9.8 CriticalSeptember 21, 2018
• gitolite Gitolite before 3.6.9 does not (in certain configurations involving @all or a regex) properly... CVE-2018-16976 Fix available 8.1 HighSeptember 12, 2018
• gitolite Directory traversal vulnerability in gitolite 3.x before 3.1, when wild card repositories and a... CVE-2012-4506 4.6 MediumOctober 22, 2012
• gitolite Directory traversal vulnerability in the Admin Defined Commands (ADC) feature in gitolite before... CVE-2011-1572 Fix available 6.8 MediumApril 9, 2011