CVE-2018-14912
82Vexday Risk Score
Patch now. It exploitation observed by VulnCheck and has a working public exploit.
ssvc Actepss 92%
from disclosure to weapon11 days
Published on NVDAug 3
1st PoC+11d
metasploitAug 3
VulnCheck+1941d
exploitation probability
92%top 1% of all CVEs
observed exploitation
yesVulnCheck
2 public exploit(s)
What the vendors declare (VEX)
Official vendor statements in CSAF/VEX format: whether their product is affected, already fixed, or ruled out — and why. These are the vendor's assertions, not Vexday's judgment.
Red HatVEX document ↗
Not affected
1 product — because the vulnerable code is not present in the product
red_hat_products
cgit_clone_objects in CGit before 1.2.1 has a directory traversal vulnerability when `enable-http-clone=1` is not turned off, as demonstrated by a cgit/cgit.cgi/git/objects/?path=../ request.
Affected products
n/a · n/apublic PoCs found — 2
exploitdbwww.exploit-db.com/exploits/45195unverifiedcve_referencewww.exploit-db.com/exploits/45195/unverified⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.