| Package | Affected versions | Patched versions |
|---|---|---|
| com.gitblit:gitblit | < 1.9.3 | 1.9.3 |
| gitblit | = 1.9.2 |
Gitblit 1.9.2 allows privilege escalation via the Config User Service: a control character can be placed in a profile data field, such as an emailAddress%3Atext '[email protected]\n\trole = "#admin"' value.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free