CVE-2018-14912
82Vexday Risk Score
Patch now. It exploitation observed by VulnCheck and has a working public exploit.
ssvc Actepss 93%
from disclosure to weapon11 days
Published on NVDAug 3
1st PoC+11d
metasploitAug 3
VulnCheck+1941d
exploitation probability
93%top 1% of all CVEs
observed exploitation
yesVulnCheck
2 public exploit(s)
cgit_clone_objects in CGit before 1.2.1 has a directory traversal vulnerability when `enable-http-clone=1` is not turned off, as demonstrated by a cgit/cgit.cgi/git/objects/?path=../ request.
Affected products
n/a · n/apublic PoCs found — 2
exploitdbwww.exploit-db.com/exploits/45195unverifiedcve_referencewww.exploit-db.com/exploits/45195/unverified⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.