medium6.8Public exploit code
CVE-2014-5023
Repository.php in Gitter, as used in Gitlist, allows remote attackers with commit privileges to execute arbitrary commands via shell metacharacters in a branch…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Gitlist 0.4.0 - Remote Code Execution2014-06-30 · remote · multiple · Verified
Impact
Repository.php in Gitter, as used in Gitlist, allows remote attackers with commit privileges to execute arbitrary commands via shell metacharacters in a branch name, as demonstrated by a "git checkout -b" command.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Gitlist | Gitlist | All versions |