| Package | Affected versions | Patched versions |
|---|---|---|
| gitolite | < 3.6.11 | 3.6.11 |
commands/rsync in Gitolite before 3.6.11, if .gitolite.rc enables rsync, mishandles the rsync command line, which allows attackers to have a "bad" impact by triggering use of an option other than -v, -n, -q, or -P.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free