CVEs-PoC/2018/CVE-2018-14912.md

CVE-2018-14912

Description

cgit_clone_objects in CGit before 1.2.1 has a directory traversal vulnerability when enable-http-clone=1 is not turned off, as demonstrated by a cgit/cgit.cgi/git/objects/?path=../ request.

POC

Reference

• https://www.exploit-db.com/exploits/45195/
• https://www.exploit-db.com/exploits/45195/

Github

• https://github.com/ARPSyndicate/kenzer-templates