CVE-2018-14912

PoC ×2—

CVSS 3.0

7.5 high

EPSS

93%p100

Published

Aug 3, 2018 (Aug 3, 2018)

Modified

Jun 17, 2026

Description

cgit_clone_objects in CGit before 1.2.1 has a directory traversal vulnerability when `enable-http-clone=1` is not turned off, as demonstrated by a cgit/cgit.cgi/git/objects/?path=../ request.

Vendors: cgit project debian
Products: cgit, debian linux
Weakness: CWE-22
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (92.9%)

In the news0 stories

No ingested article mentions this CVE yet.