Gitblit vulnerabilities
We track 2 vulnerabilities in Gitblit products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on May 21, 2022.
2vulnerabilities
1critical
1high
0exploited
8.7average CVSS score
Latest Gitblit vulnerabilities
- 7.5 High severity
Gitblit: Improper Limitation of a Pathname to a Restricted Directory
A Path Traversal vulnerability in Gitblit 1.9.3 can lead to reading website files via /resources//../ (e.g., followed by a WEB-INF or META-INF pathname).
- 9.8 Critical severity
Gitblit: Improper Privilege Management
Gitblit 1.9.2 allows privilege escalation via the Config User Service: a control character can be placed in a profile data field, such as an emailAddress%3Atext '[email protected]\n\trole = "#admin"' value.