Directory traversal vulnerability in... CVE-2013-2117

4.3 AV AC AU C I A
发布: 2013-08-09
修订: 2013-08-22

Directory traversal vulnerability in the cgit_parse_readme function in ui-summary.c in cgit before 0.9.2, when a readme file is set to a filesystem path, allows remote attackers to read arbitrary files via a .. (dot dot) in the url parameter.

0%
暂无可用Exp或PoC
当前有29条受影响产品信息