Approved changes feed: RSS · Atom
cpe:2.3:a:cgit_project:cgit:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Cgit Project (063751c0-21f7-521d-9eec-1a48180477e6) |
|---|---|
| Product | Cgit (e5d09465-eaf0-5c7b-93a4-259df07e929d) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from purl2cpe mapping
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:bitbucket/opensource26/cgit |
purl2cpe | 2026-06-01 10:13:10.569965 |
pkg:deb/debian/cgit |
purl2cpe | 2026-06-01 10:13:10.569969 |
pkg:deb/ubuntu/cgit |
purl2cpe | 2026-06-01 10:13:10.569971 |
pkg:github/danrue/cgit |
purl2cpe | 2026-06-01 10:13:10.569974 |
pkg:github/zx2c4/cgit |
purl2cpe | 2026-06-01 10:13:10.569977 |
pkg:rpm/fedora/cgit |
purl2cpe | 2026-06-01 10:13:10.569980 |
pkg:rpm/opensuse/cgit |
purl2cpe | 2026-06-01 10:13:10.569983 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2018-14912 |
vulnerable | 2026-06-08 05:10:53.667927 |
Details available
cgit_clone_objects in CGit before 1.2.1 has a directory traversal vulnerability when `enable-http-clone=1` is not turned off, as demonstrated by a cgit/cgit.cgi/git/objects/?path=../ request.
Published: 2018-08-03T19:00:00.000Z
Updated: 2024-08-05T09:46:25.186Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-1901 |
vulnerable | 2026-06-08 05:07:32.244753 |
Details available
Integer overflow in the authenticate_post function in CGit before 0.12 allows remote attackers to have unspecified impact via a large value in the Content-Length HTTP header, which triggers a buffer overflow.
Published: 2016-01-20T16:00:00.000Z
Updated: 2024-08-05T23:10:40.011Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-1900 |
vulnerable | 2026-06-08 05:07:32.244267 |
Details available
CRLF injection vulnerability in the cgit_print_http_headers function in ui-shared.c in CGit before 0.12 allows remote attackers with permission to write to a repository to inject arbitrary HTTP headers and conduct HTTP response splitting attacks or cross-site scripting (XSS) attacks via newline characters in a filename.
Published: 2016-01-20T16:00:00.000Z
Updated: 2024-08-05T23:10:39.899Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-1899 |
vulnerable | 2026-06-08 05:07:32.243649 |
Details available
CRLF injection vulnerability in the ui-blob handler in CGit before 0.12 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks or cross-site scripting (XSS) attacks via CRLF sequences in the mimetype parameter, as demonstrated by a request to blob/cgit.c.
Published: 2016-01-20T16:00:00.000Z
Updated: 2024-08-05T23:10:40.239Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.