medium5.5
CVE-2013-7203
gitolite before commit fa06a34 might allow local users to read arbitrary files in repositories via vectors related to the user umask when running gitolite setu…
Impact
gitolite before commit fa06a34 might allow local users to read arbitrary files in repositories via vectors related to the user umask when running gitolite setup.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Gitolite | Gitolite | through 3.5.3 |
Weakness classification
References
- NVD record
- CVE.org record
- http://packetstormsecurity.com/files/149438/ManageEngine-SupportCenter-Plus-8.1.0-Cross-Site-Scripting.html
- https://lists.fedoraproject.org/pipermail/package-announce/2014-January/125611.html
- https://marc.info/?l=oss-security&m=138783069700756&w=2
- http://packetstormsecurity.com/files/149438/ManageEngine-SupportCenter-Plus-8.1.0-Cross-Site-Scripting.html
- https://lists.fedoraproject.org/pipermail/package-announce/2014-January/125611.html
- https://marc.info/?l=oss-security&m=138783069700756&w=2