CVE-2013-2117

NONECVSS 0.0

0.0

Directory traversal vulnerability in the cgit_parse_readme function in ui-summary.c in cgit before 0.9.2, when a readme file is set to a filesystem path, allows remote attackers to read arbitrary files via a .. (dot dot) in the url parameter.

🔗 References (12)

secalert@redhathttp://git.zx2c4.com/cgit/commit/?h=wip&id=babf94e04e74123eb658a823213c062663cdadd6
secalert@redhathttp://lists.opensuse.org/opensuse-updates/2013-07/msg00061.html
secalert@redhathttp://lists.opensuse.org/opensuse-updates/2013-08/msg00012.html
secalert@redhathttp://lists.zx2c4.com/pipermail/cgit/2013-May/001394.html
secalert@redhathttp://secunia.com/advisories/54186
secalert@redhathttp://www.openwall.com/lists/oss-security/2013/05/27/3
af854a3a-2127-422b-91ae-364da2661108http://git.zx2c4.com/cgit/commit/?h=wip&id=babf94e04e74123eb658a823213c062663cdadd6
af854a3a-2127-422b-91ae-364da2661108http://lists.opensuse.org/opensuse-updates/2013-07/msg00061.html
af854a3a-2127-422b-91ae-364da2661108http://lists.opensuse.org/opensuse-updates/2013-08/msg00012.html
af854a3a-2127-422b-91ae-364da2661108http://lists.zx2c4.com/pipermail/cgit/2013-May/001394.html
af854a3a-2127-422b-91ae-364da2661108http://secunia.com/advisories/54186
af854a3a-2127-422b-91ae-364da2661108http://www.openwall.com/lists/oss-security/2013/05/27/3

Is Your Infrastructure Affected by CVE-2013-2117?

EchelonGraph automatically scans your cloud infrastructure and maps CVE exposure using blast radius analysis.

Start Free Scan →Browse All CVEs

CVE-2013-2117

📅 Published

🔄 Last Modified

🔗 References (12)

Dependency Blast Radius

Is Your Infrastructure Affected by CVE-2013-2117?