Skip to main content
cve.nowby Sazabi
← Maven
MavenPackage

com.gitblit:gitblit

2 known vulnerabilities, with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
2
Registry
Maven Central

Advisories 2

  • Gitblit 1.9.2 allows privilege escalation via the Config User Service: a control character can be placed in a profile data field, such as…

    Affected: fixed in 1.9.3.

  • A Path Traversal vulnerability in Gitblit 1.9.3 can lead to reading website files via /resources//../ (e.g., followed by a WEB-INF or…

    Affected: through 1.9.3.