| Package | Affected versions | Patched versions |
|---|---|---|
| gitolite | = 3.0= 3.02= 3.03= 3.04 | |
| gitolite | = 3.01 |
Directory traversal vulnerability in gitolite 3.x before 3.1, when wild card repositories and a pattern matching "../" are enabled, allows remote authenticated users to create arbitrary repositories and possibly perform other actions via a .. (dot dot) in a repository name.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free