Approved changes feed: RSS · Atom

cpe:2.3:a:bonobogitserver:bonobo_git_server:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorBonobogitserver (b6721ba9-b3bb-5b82-99e7-1eadeffbc92f)
ProductBonobo Git Server (2c46f62c-d128-5cc5-8203-e0fb47a83691)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/jakubgarfield/bonobo-git-server purl2cpe 2026-06-01 10:11:05.013672

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2019-11218 vulnerable 2026-06-08 05:12:36.665759 Details available
Improper handling of extra parameters in the AccountController (User Profile edit) in Jakub Chodounsky Bonobo Git Server before 6.5.0 allows authenticated users to gain application administrator privileges via additional form parameter submissions.
Published: 2019-04-24T19:21:27.000Z
Updated: 2024-08-04T22:48:09.024Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-11217 vulnerable 2026-06-08 05:12:36.665359 Details available
The GitController in Jakub Chodounsky Bonobo Git Server before 6.5.0 allows execution of arbitrary commands in the context of the web server via a crafted http request.
Published: 2019-04-24T19:13:39.000Z
Updated: 2024-08-04T22:48:08.836Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.