VDB

GCVE-110-MAGEIA-2018-351

GCVE-110-MAGEIA-2018-351
Advisory Published
Vulnetix · Advisory published August 23, 2018
Jann Horn discovered a directory traversal vulnerability in cgit, a fast web frontend for git repositories written in C. A remote attacker can take advantage of this flaw to retrieve arbitrary files via a specially crafted request, when 'enable-http-clone=1' (default) is not turned off.
Download JSON Open in Console

Affected Products

VendorProductVersionsPlatforms
Mageiacgit0 (affected), 0.12-3.1.mga6 (unaffected)—

Aliases

CVE-2018-14912

Transitive aliases

OPENSUSE-SU-2024:10679-1GSD-2018-14912GHSA-46c3-xc8j-9qg7

References

Updated cgit packages fix security vulnerability
advisory
Updated cgit packages fix security vulnerability
issue
Updated cgit packages fix security vulnerability
advisory

Browse GCVE Records

72,096 records in the GCVE database · Updated July 14, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON
$ Console Community · 100/wk Open console ›